Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Probable infection with keylogger/spyware


  • Please log in to reply
13 replies to this topic

#1 uberpwner

uberpwner

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:31 AM

Posted 18 October 2009 - 05:19 PM

So I have had to change passwords on several different sites because my passwords no longer worked. I know they were right because I wrote them down and typed them in correctly. This has happened twice on teh same site, and several times on a few others. I'm guessing possible keylogging/spyware software on my computer. I've run malwarebytes and norton antivirus but have not found any indications of anything on my computer. Are there any good free programs that can detect and remove spyware extremely well? Please help, thanks!

This is my first post here so if I need to change something or put more info, please tell me!! thanks!!!

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,740 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:31 AM

Posted 18 October 2009 - 09:16 PM

Hello and welcome, Let's try these.

Next run ATF and SAS:
Note.. SAS doesn't open the registry hives for other user accounts on the system, so scans should be done from each user account.

Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".

From your regular user account..
Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop ..
DO NOT run yet.
Open SUPER from icon and install and Update it
Under Scanner Options make sure the following are checked (leave all others unchecked):
Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining
.
Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet.

Now reboot into Safe Mode: How to enter safe mode(XP)
Using the F8 Method
Restart your computer.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode
.

Double-click ATF-Cleaner.exe to run the program.
Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.

If you use Firefox or Opera browser click that browser at the top and choose: Select All
Click the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program
.

NOW Scan with SUPER
Open from the desktop icon or the program Files list
On the left, make sure you check C:\Fixed Drive.
Perform a Complete scan. After scan,Verify they are all checked.
Click OK on the summary screen to quarantine all found items.
If asked if you want to reboot, click "Yes" and reboot normally.

To retrieve the removal information after reboot, launch SUPERAntispyware again.
Click Preferences, then click the Statistics/Logs tab.
Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
If there are several logs, click the current dated log and press View log.
A text file will open in your default text editor.
Please copy and paste the Scan Log results in your next reply.
Click Close to exit the program.


Rerun MBAM (MalwareBytes) like this:

Open MBAM in normal mode and click Update tab, select Check for Updates,when done
click Scanner tab,select Quick scan and scan (normal mode).
After scan click Remove Selected, Post new scan log and Reboot into normal mode.

Please ask any needed questions,post 2 logs and Let us know how the PC is running now.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 uberpwner

uberpwner
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:31 AM

Posted 18 October 2009 - 11:18 PM

Doing what you've told me to do, running super right now. However, things have changed for the worse. I rebooted in safe mode and found out there was a new admin account with a password that i had never created before...this could be bad. really bad. i think i'll unplug my computer tonight :thumbsup: should i just reinstall windows???

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,740 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:31 AM

Posted 19 October 2009 - 10:51 AM

Hello, What did your Antivirus scan show??

Not an unwise decision to make. In some instances an infection may have caused so much damage to your system that it cannot be completely cleaned or repaired. Wiping your drive, reformatting, and performing a clean install of the OS or doing a factory restore removes everything and is the safest action but I cannot make that decision for you.

Reformatting a hard disk deletes all data. If you decide to reformat, you can back up all your important documents, data files and photos. The safest practice is not to backup any autorun.ini or .exe files because they may be infected. Some types of malware may disguise itself by adding and hiding its extension to the existing extension of files so be sure you take a close look at the full name. After reformatting, as a precaution, make sure you scan these files with your anti-virus prior to copying them back to your hard drive.

The best proceedure is a low level format. This completely wipes the drive. Then reinstall the OS.
Use the free version of Active@ KillDisk.
Or Darik's Boot And Nuke

The best sources of Information on this are
Reformatting Windows XP
Michael Stevens Tech

Of course also feel free to ask anything on this in the XP forum. They'd be glad to help.

==============================

2 guidelines/rules when backing up

1) Backup all your important data files, pictures, music, work etc... and save it onto an external hard-drive. These files usually include .doc, .txt, .mp3, .jpg etc...
2) Do not backup any executables files or any window files. These include .exe/.scr/.htm/.html/.xml/.zip/.rar files as they may contain traces of malware. Also, .html or .htm files that are webpages should also be avoided.

Download Belarc Advisor - builds a detailed profile of your installed software and hardware, including Microsoft Hotfixes, and displays the results in your Web browser.
Run it and then print out the results, they may be handy.

Since we don't know exactly which infections we're dealing with here, we should take some precautions before we attempt to move files from the infected machine. Run the following on your clean computer, and make sure you insert your flash drives at the prompt.
Download and Run FlashDisinfector

Please download Flash_Disinfector.exe by sUBs and save it to your desktop.
  • Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
  • The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
  • Hold down the Shift key when inserting the drive until Windows detects it to keep autorun.inf from executing if it is present.
  • Wait until it has finished scanning and then exit the program.
  • Reboot your computer when done.
Note: As part of its routine, Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive that was plugged in when you ran it. Do not delete this folder...it will help protect your drives from future infection by keeping the autorun file from being installed on the root drive and running other malicious files.


Reinstall Windows Vista
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 uberpwner

uberpwner
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:31 AM

Posted 19 October 2009 - 08:51 PM

I'd really rather not wipe ALL my harddrives if possible, even though I know that's the only way to be 100% sure I've deleted the virus. Also, a quick question. If I boot into normal mode and unplug my internet cable (i have no wireless card installed), the virus cannot do anything to my system, correct? I just want to make sure that the virus cannot do anything without an internet connection before I start it up in normal mode.

Also, I forgot to add that I had recently installed Elite Antikeylogger and it had been finding random stuff lke SPJO.sys or SPYJ.sys or things like that. dunno if that means anything to you guys *shrug*

Here are the results from my scan. there are 2 cuz my lil bro stopped my first one since he didn't know what it was.

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 10/19/2009 at 02:02 AM

Application Version : 4.29.1004

Core Rules Database Version : 4172
Trace Rules Database Version: 2093

Scan type : Complete Scan
Total Scan Time : 02:54:57

Memory items scanned : 234
Memory threats detected : 0
Registry items scanned : 5363
Registry threats detected : 0
File items scanned : 265343
File threats detected : 349

Adware.Tracking Cookie
.atwola.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.atwola.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
ar.atwola.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.ar.atwola.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
anat.tacoda.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
gtb1.acecounter.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
gtb1.acecounter.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.dynamic.media.adrevolver.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.dynamic.media.adrevolver.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
www.tqlkg.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.adecn.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.adecn.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.kontera.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.kontera.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.kontera.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.chitika.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.imrworldwide.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.imrworldwide.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
ads4.blastro.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
ads3.blastro.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.network.realmedia.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
anad.tacoda.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
ads.revsci.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
ads.revsci.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
www.burstbeacon.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
www.burstnet.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
ar.atwola.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
ad1.clickhype.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.apmebf.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.apmebf.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.track.bestbuy.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.track.bestbuy.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.track.bestbuy.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.track.bestbuy.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.track.bestbuy.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.track.bestbuy.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
stats.gamestop.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.interclick.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.interclick.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.interclick.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.interclick.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.interclick.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.interclick.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.interclick.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.socialmedia.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
adserver.3digit.de [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.media6degrees.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
ads.react2media.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.adultfriendfinder.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.adultfriendfinder.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.adultfriendfinder.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.adultfriendfinder.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
traffic.buyservices.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
www.googleadservices.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.iframe.mediaplazza.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.iframe.mediaplazza.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.partner2profit.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.partner2profit.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.partner2profit.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.partner2profit.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
.partner2profit.com [ E:\Documents and Settings\Ben\Application Data\Mozilla\Firefox\Profiles\bi6cjtgp.default\cookies.txt ]
E:\Documents and Settings\Ben\Cookies\ben@insightexpressai[1].txt
.atwola.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.ar.atwola.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
anat.tacoda.net [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
gtb1.acecounter.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
gtb1.acecounter.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.adecn.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.kontera.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.kontera.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.kontera.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.chitika.net [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.imrworldwide.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.imrworldwide.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
ads4.blastro.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
ads3.blastro.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.network.realmedia.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
clicktorrent.info [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
ads.revsci.net [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
ads.revsci.net [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
www.burstbeacon.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.cgm.adbureau.net [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
ar.atwola.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.insightexpressai.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
ad1.clickhype.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.apmebf.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.apmebf.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.track.bestbuy.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.track.bestbuy.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.track.bestbuy.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.track.bestbuy.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.track.bestbuy.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
stats.gamestop.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.interclick.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.interclick.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.interclick.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.interclick.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.socialmedia.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
adserver.3digit.de [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.media6degrees.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
ads.react2media.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.adultfriendfinder.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.adultfriendfinder.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
traffic.buyservices.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.iframe.mediaplazza.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.iframe.mediaplazza.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.partner2profit.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.partner2profit.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.partner2profit.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.partner2profit.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
.partner2profit.com [ E:\Documents and Settings\Ben.COMP\Application Data\Mozilla\Firefox\Profiles\27pfnp3r.default\cookies.txt ]
E:\Documents and Settings\Ben.COMP\Cookies\ben@2o7[1].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@ad.yieldmanager[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@adopt.specificclick[1].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@ads.addynamix[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@ads.pointroll[1].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@advertising[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@apmebf[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@atdmt[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@atwola[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@casalemedia[1].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@doubleclick[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@fastclick[1].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@imrworldwide[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@insightexpressai[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@media.adrevolver[1].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@microsoftwindows.112.2o7[1].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@microsoftwlmessengermkt.112.2o7[1].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@network.realmedia[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@nextag[1].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@questionmarket[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@revsci[1].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@revsci[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@specificclick[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@statcounter[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@tacoda[1].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@tribalfusion[2].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@xiti[1].txt
E:\Documents and Settings\Ben.COMP\Cookies\ben@zedo[1].txt

Unclassified.Unknown Origin
H:\USB\TUNE UP\WINASO 2.0.6\WINASO 2.0.6 KEYGEN 1\KEYGEN.NFO

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 10/19/2009 at 09:28 PM

Application Version : 4.29.1004

Core Rules Database Version : 4172
Trace Rules Database Version: 2093

Scan type : Complete Scan
Total Scan Time : 03:24:54

Memory items scanned : 231
Memory threats detected : 0
Registry items scanned : 5363
Registry threats detected : 0
File items scanned : 291339
File threats detected : 1

Adware.Vundo Variant
K:\MY PICTURES\HOUSE\THUMBS.DB

I haven't even been to most of those sites -.- and the second one is just a picture so i don't think that's actually adware...
However, E isn't even where my windows is installed...My C drive is where I installed Windows. E:\ was an old installation a loong time ago. Anyways, those are my results. Any more advice? Can I solve this without reformatting? Also, I've been looking around on other forums and am wondering, would a system registry restore be a possible solution?

Edited by uberpwner, 19 October 2009 - 11:19 PM.


#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,740 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:31 AM

Posted 20 October 2009 - 11:11 AM

Hi, Did you run your Antivirus ? Didi it find anythig?
I thought you meant you wanted to reinstall,no problem.

Next run MBAM (MalwareBytes):

NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.

Please download Malwarebytes Anti-Malware and save it to your desktop.

alternate download link

MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
  • Exit MBAM when done.
Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 uberpwner

uberpwner
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:31 AM

Posted 20 October 2009 - 08:32 PM

Malwarebytes' Anti-Malware 1.38
Database version: 2297
Windows 5.1.2600 Service Pack 2

10/20/2009 8:13:18 PM
mbam-log-2009-10-20 (20-13-18).txt

Scan type: Quick Scan
Objects scanned: 84885
Time elapsed: 4 minute(s), 11 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Malware Bytes didn't find anything...neither did my Norton antivirus. Any other suggestions? I want to make sure my computer is clean before connecting it to the internet o.0 Also, I have admin rights on my account now.

#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,740 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:31 AM

Posted 21 October 2009 - 11:01 AM

Hi,that copy of MBAM is outdated.
Rerun MBAM (MalwareBytes) like this:

Open MBAM in normal mode and click Update tab, select Check for Updates,when done
click Scanner tab,select Quick scan and scan (normal mode).
After scan click Remove Selected, Post new scan log and Reboot into normal mode.

How is it now?
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 uberpwner

uberpwner
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:31 AM

Posted 21 October 2009 - 08:53 PM

Malwarebytes' Anti-Malware 1.41
Database version: 2775
Windows 5.1.2600 Service Pack 2

10/21/2009 8:52:29 PM
mbam-log-2009-10-21 (20-52-29).txt

Scan type: Quick Scan
Objects scanned: 91673
Time elapsed: 7 minute(s), 20 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Still nothing. Does this mean my system could possibly be clean?? :-D

#10 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,740 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:31 AM

Posted 21 October 2009 - 09:30 PM

It maybe except for one thing. You seem to be having difficulty updating MBAM. It should be at at least 3008.
Try again please.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#11 uberpwner

uberpwner
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:31 AM

Posted 21 October 2009 - 10:02 PM

Malwarebytes' Anti-Malware 1.41
Database version: 3009
Windows 5.1.2600 Service Pack 2

10/21/2009 10:01:15 PM
mbam-log-2009-10-21 (22-01-15).txt

Scan type: Quick Scan
Objects scanned: 97244
Time elapsed: 1 minute(s), 24 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
Ok, I think it's updated correctly now but I'm not sure...

#12 uberpwner

uberpwner
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:31 AM

Posted 17 February 2010 - 01:23 AM

So I've run all the programs and I think I had cleared all of it out...until now. The spyware is now rearing it's ugly head again and appears to have reappeared in my system. I've run malwarebytes and super antispyware but they haven't found anything, cept for maybe a few cookies. Any advice on what to do?

#13 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,740 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:09:31 AM

Posted 17 February 2010 - 10:48 AM

Hello did you update both before your latest scan?

Rerun MBAM (MalwareBytes) like this:

Open MBAM in normal mode and click Update tab, select Check for Updates,when done
click Scanner tab,select Quick scan and scan (normal mode).
After scan click Remove Selected, Post new scan log and Reboot into normal mode.



Open SUPER from icon and Update it
Under Scanner Options make sure the following are checked (leave all others unchecked):
Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining
.
Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet.

Now reboot into Safe Mode: How to enter safe mode(XP)
Using the F8 Method
Restart your computer.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode
.


NOW Scan with SUPER
Open from the desktop icon or the program Files list
On the left, make sure you check C:\Fixed Drive.
Perform a Complete scan. After scan,Verify they are all checked.
Click OK on the summary screen to quarantine all found items.
If asked if you want to reboot, click "Yes" and reboot normally.

To retrieve the removal information after reboot, launch SUPERAntispyware again.
Click Preferences, then click the Statistics/Logs tab.
Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
If there are several logs, click the current dated log and press View log.
A text file will open in your default text editor.
Please copy and paste the Scan Log results in your next reply.
Click Close to exit the program.


Let us know how the PC is running now.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#14 uberpwner

uberpwner
  • Topic Starter

  • Members
  • 11 posts
  • OFFLINE
  •  
  • Local time:08:31 AM

Posted 24 February 2010 - 10:49 PM

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 02/24/2010 at 09:11 PM

Application Version : 4.34.1000

Core Rules Database Version : 4618
Trace Rules Database Version: 2430

Scan type : Complete Scan
Total Scan Time : 01:00:24

Memory items scanned : 241
Memory threats detected : 0
Registry items scanned : 5535
Registry threats detected : 0
File items scanned : 54023
File threats detected : 4

Trojan.Agent/Gen-Nullo[Short]
E:\SYSTEM VOLUME INFORMATION\_RESTORE{45CCE242-6F33-45F6-9D57-2183BEAA503E}\RP85\A0013708.DLL
E:\SYSTEM VOLUME INFORMATION\_RESTORE{45CCE242-6F33-45F6-9D57-2183BEAA503E}\RP85\A0013711.DLL
H:\SYSTEM VOLUME INFORMATION\_RESTORE{4B8B0413-1EAC-4AE5-9B4D-ABE72CB88076}\RP276\A0048517.EXE
H:\SYSTEM VOLUME INFORMATION\_RESTORE{4B8B0413-1EAC-4AE5-9B4D-ABE72CB88076}\RP276\A0048518.EXE

Malwarebytes' Anti-Malware 1.44
Database version: 3787
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

2/24/2010 8:07:28 PM
mbam-log-2010-02-24 (20-07-28).txt

Scan type: Quick Scan
Objects scanned: 115939
Time elapsed: 3 minute(s), 43 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

These 2 scans are the most recent scans with malwarebytes and super. They both should be updated properly as well. I have yet to confirm if the spyware is completely gone, however, my computer does seem slightly faster than before :thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users