Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Interesting ports in listening mode


  • Please log in to reply
7 replies to this topic

#1 Steve156

Steve156

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:06 PM

Posted 18 July 2010 - 02:43 PM

I ran the Malwarebytes 4 times to find these as the resulting logs..

=== === === === === 1:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4322

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

7/17/2010 10:37:40 PM
mbam-log-2010-07-17 (22-37-40).txt

Scan type: Quick scan
Objects scanned: 139856
Time elapsed: 13 minute(s), 11 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 1
Registry Data Items Infected: 4
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Not selected for removal.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\system32\memman.vxd (Rogue.sysCleaner) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Not selected for removal.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Not selected for removal.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Not selected for removal.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Not selected for removal.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\memman.vxd (Rogue.sysCleaner) -> Quarantined and deleted successfully.

=== === === === === 2:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4322

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

7/17/2010 10:38:14 PM
mbam-log-2010-07-17 (22-38-14).txt

Scan type: Quick scan
Objects scanned: 192
Time elapsed: 11 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

=== === === === === 3:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4322

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

7/17/2010 10:50:21 PM
mbam-log-2010-07-17 (22-50-21).txt

Scan type: Quick scan
Objects scanned: 139980
Time elapsed: 11 minute(s), 12 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

=== === === === === 4:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4322

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

7/18/2010 12:09:21 AM
mbam-log-2010-07-18 (00-09-21).txt

Scan type: Full scan (C:\|)
Objects scanned: 279574
Time elapsed: 1 hour(s), 5 minute(s), 28 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\All Users\Application Data\{BE8C01F0-CE6C-40B3-8106-2BB3D87A95F0}\OFFLINE\71747601\2302A1E7\memman.vxd (Rogue.sysCleaner) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{D24A3BE8-4CBB-48D0-81AD-ACAFA6A6C48B}\RP306\A0150293.vxd (Rogue.sysCleaner) -> Quarantined and deleted successfully.

=== === === === ===

My main concern:
I notice a ports connecting and unconnecting with 127.0.0.1 and 192.168.1.101(my computer on network).. here's a list of what i got from netstat program (using cmd.exe)

These are the peices that i am worried about (only 1 more but it's port 6667 for IRC):
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1026 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1935 127.0.0.1:1936 ESTABLISHED
TCP 127.0.0.1:1936 127.0.0.1:1935 ESTABLISHED
TCP 127.0.0.1:1937 127.0.0.1:1938 ESTABLISHED
TCP 127.0.0.1:1938 127.0.0.1:1937 ESTABLISHED
TCP 192.168.1.101:139 0.0.0.0:0 LISTENING
TCP [::]:135 [::]:0 LISTENING 0
UDP 0.0.0.0:445 *:*
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:4500 *:*
UDP 127.0.0.1:123 *:*
UDP 127.0.0.1:1847 *:*
UDP 127.0.0.1:1900 *:*
UDP 192.168.1.101:123 *:*
UDP 192.168.1.101:137 *:*
UDP 192.168.1.101:138 *:*
UDP 192.168.1.101:1900 *:*

BC AdBot (Login to Remove)

 


#2 chromebuster

chromebuster

  • Members
  • 899 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:the crazy city of Boston, In the North East reaches of New England
  • Local time:12:06 AM

Posted 18 July 2010 - 04:41 PM

Hey,
Unless I blew right by it, I don't see port 6667 there. That doesn't mean it's not though. Keep a lookout and wait for someone to see that.

The AccessCop Network is just me and my crew. 

Some call me The Queen of Cambridge


#3 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:04:06 AM

Posted 18 July 2010 - 05:15 PM

Can you update malwarebytes anti-malware and perform a full scan same with http://www.superantispyware.com and post the logs here.

#4 Steve156

Steve156
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:06 PM

Posted 21 July 2010 - 11:21 PM

=== === === === ===
After malwarebytes scanning:
=== === === === ===
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4325

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

7/18/2010 8:40:17 PM
mbam-log-2010-07-18 (20-40-17).txt

Scan type: Full scan (C:\|)
Objects scanned: 281456
Time elapsed: 1 hour(s), 7 minute(s), 8 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\Stephen\Desktop\Starcraft II_ Wings of Liberty (2010) (Beta)\lazylaunch.exe_ (Hacktool.Gen) -> No action taken.
C:\System Volume Information\_restore{D24A3BE8-4CBB-48D0-81AD-ACAFA6A6C48B}\RP306\A0150307.vxd (Rogue.sysCleaner) -> No action taken.

=== === === === ===
After AVG scanning:
=== === === === ===
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 07/18/2010 at 09:45 PM

Application Version : 4.40.1002

Core Rules Database Version : 5226
Trace Rules Database Version: 3038

Scan type : Complete Scan
Total Scan Time : 00:54:11

Memory items scanned : 424
Memory threats detected : 0
Registry items scanned : 7373
Registry threats detected : 0
File items scanned : 24441
File threats detected : 503

Adware.Tracking Cookie
C:\Documents and Settings\Stephen\Cookies\stephen@popularscreensavers[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@romnation[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@thinkgeek.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@interclick[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adrevolver[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@questionmarket[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@sonyonlineentertainment.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@247realmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@laptopmag.122.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ad.yieldmanager[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@cgm.adbureau[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@myroitracking[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www7.addfreestats[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adserver.adtechus[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@network.realmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@freefind[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.mail[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@media6degrees[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@chitika[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@burstnet[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@revsci[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads3.blastro[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ad3.clickhype[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adserv01[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@realmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@nakedonthestreets[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@imrworldwide[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@at.atwola[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@serving-sys[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@doubleclick[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@server.iad.liveperson[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@tacoda[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@insightexpressai[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.crakmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@mediaplex[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@qksrv[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@statse.webtrendslive[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@kontera[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@bs.serving-sys[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@clicks.adengage[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@hitbox[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@specificmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@media.mtvnservices[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@yieldmanager[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.popularscreensavers[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@viagametrailersvideo.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adbureau[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adopt.specificclick[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.gamershell[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@atdmt[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@microsoftinternetexplorer.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.burstbeacon[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.techguy[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@statcounter[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@apmebf[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ehg-reddoorinteractive.hitbox[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads2.indexmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.pointroll[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@advertising[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@atwola[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ehg-myspaceinc.hitbox[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@overture[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads4.googleadservices[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@toplist[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adbrite[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@crackle[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ehg-groupernetworks.hitbox[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@specificclick[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@likecrack[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.monster[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@tribalfusion[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@trafficmp[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@zedo[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@casalemedia[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@xiti[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@mobileentertainment.directtrack[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@viacom.adbureau[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@fastclick[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ad1.clickhype[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@tracking.the7thchamber[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ad2.clickhype[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads3.googleadservices[5].txt
C:\Documents and Settings\Stephen\Cookies\stephen@stats.adbrite[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ptc.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.mobygames[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@toseeka[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@media.quakelive[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.dlx[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads3.googleadservices[3].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads0.googleadservices[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.clickmanage[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@eaeacom.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@superpages.122.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads7.googleadservices[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads4.googleadservices[7].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads5.googleadservices[3].txt
C:\Documents and Settings\Stephen\Cookies\stephen@webpower[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@microsoftwindows.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@tradedoubler[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.worthplaying[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.qsstats[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@bravenet[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads1.googleadservices[4].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adtech[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@CABJFHXV.txt
C:\Documents and Settings\Stephen\Cookies\stephen@imediablast[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adopt.euroclick[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@azjmp[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.socialtrack[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@linuxquestions[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@cdn4.specificclick[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads7.googleadservices[5].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads4.googleadservices[6].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads2.googleadservices[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads3.googleadservices[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads6.googleadservices[4].txt
C:\Documents and Settings\Stephen\Cookies\stephen@stat.dealtime[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@eas.apm.emediate[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@a1.interclick[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@technologyquestions[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@toplist[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads7.googleadservices[11].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads6.googleadservices[10].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.dumpableep[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.communityheaven[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.3dstats[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads1.googleadservices[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads4.googleadservices[3].txt
C:\Documents and Settings\Stephen\Cookies\stephen@pro-market[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@free.wegcash[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads3.googleadservices[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads6.googleadservices[8].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads6.googleadservices[11].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.telegraph.co[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@counter.hitslink[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads6.googleadservices[5].txt
C:\Documents and Settings\Stephen\Cookies\stephen@richmedia.yahoo[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@cdn1.trafficmp[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads7.googleadservices[10].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads4.googleadservices[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@perf.overture[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads3.googleadservices[4].txt
C:\Documents and Settings\Stephen\Cookies\stephen@smartadserver[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@nextag[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.lucidmedia[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@hulu.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@media.adrevolver[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@socialmedia[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adlegend[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@clickz.lonelycheatingwives[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads1.googleadservices[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads7.googleadservices[7].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads1.googleadservices[5].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.mediageeks[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@iacas.adbureau[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@affiliates.commissionaccount[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ad2.doublepimp[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@valueclick[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@server.cpmstar[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.widgetbucks[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@blacknews.advertserve[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.starcitygames[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@b5media[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@clickcash[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads2.googleadservices[6].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads6.googleadservices[6].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ehg-wacomtechnology.hitbox[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads5.googleadservices[4].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www3.addfreestats[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ehg-newscientist.hitbox[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@mycounter.tinycounter[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@gostats[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@shopping.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@cracked[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@partner.finditquick[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads4.googleadservices[5].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads6.googleadservices[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads4.googleadservices[11].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.matracking[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ehg-sportingbet.hitbox[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.rompmedia[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@invitemedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@bluestreak[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads4.googleadservices[9].txt
C:\Documents and Settings\Stephen\Cookies\stephen@im.banner.t-online[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@rotator.adjuggler[3].txt
C:\Documents and Settings\Stephen\Cookies\stephen@yieldmanager[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads6.googleadservices[7].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads7.googleadservices[6].txt
C:\Documents and Settings\Stephen\Cookies\stephen@click.payserve[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@trackalyzer[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@stats4.clicktracks[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ext-us.bestofmedia[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@dc.tremormedia[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.undertone[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@msnportal.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads1.googleadservices[3].txt
C:\Documents and Settings\Stephen\Cookies\stephen@m1.webstats.motigo[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.netvisitsinc[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.bridgetrack[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.bnmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@sales.liveperson[6].txt
C:\Documents and Settings\Stephen\Cookies\stephen@track.adform[3].txt
C:\Documents and Settings\Stephen\Cookies\stephen@yadro[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.users[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@revenue[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.trilulilu[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@videoegg.adbureau[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads5.googleadservices[5].txt
C:\Documents and Settings\Stephen\Cookies\stephen@naiadsystems[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@phg.hitbox[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@clickthrough.wegcash[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adprotraffic[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@clickbank[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads.googleadservices[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads7.googleadservices[8].txt
C:\Documents and Settings\Stephen\Cookies\stephen@microsoftsto.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads5.googleadservices[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads4.googleadservices[8].txt
C:\Documents and Settings\Stephen\Cookies\stephen@unitedmedia[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.hardwaresecrets[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.technologyquestions[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@clickbangpop[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads4.googleadservices[10].txt
C:\Documents and Settings\Stephen\Cookies\stephen@collective-media[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@enhance[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads7.googleadservices[9].txt
C:\Documents and Settings\Stephen\Cookies\stephen@tracking.admarketplace[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.toseeka[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ordie.adbureau[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@burstbeacon[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@stats.gamestop[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads0.googleadservices[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads6.googleadservices[9].txt
C:\Documents and Settings\Stephen\Cookies\stephen@serving.adsrevenue.clicksor[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@hotlog[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adserver.adreactor[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@buzznet.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ar.atwola[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@login.revenueloop[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@usatoday1.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@trafficholder[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.neverbeg[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ad1.adtitan[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@feedads2.googleadservices[7].txt
C:\Documents and Settings\Stephen\Cookies\stephen@rotator.adjuggler[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@enterotracker[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@tripod[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.lucidmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@gandermountain.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@oddcast[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@linksynergy[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@server.iad.liveperson[6].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.filthdump[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@lfstmedia[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@pop.webfile[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@counter.surfcounters[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@audit.median[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@qnsr[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.wtfpeople[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ehg-ipm.hitbox[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.stackoverflow[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.lycos[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ad.zanox[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adinterax[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@miarroba.solution.weborama[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.sun[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adserver.71i[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@triumphjc.tripod[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.epitrack[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.tltrack[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@mmc.122.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@exchangebanners[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ehg-reed.hitbox[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@eb.adbureau[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@mediafire[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adserver1.christianitytoday[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@sales.liveperson[4].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adserver.imagearn[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@cio.122.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@bridge1.admarketplace[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@winzip.122.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@dmtracker[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@track.tester-rewards[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@traffic.tcmagnet[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.oatracking[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.foodserviceadnetwork[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@safeway.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@sales.liveperson[5].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.whaleads[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@zipzoomfly.122.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.accountwizard[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.ad4game[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adserver.incgamers[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@fortunecity[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.raasnet[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@linuxappfinder[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@gr.burstnet[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ehg-wizardsofthecoast.hitbox[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@sales.liveperson[3].txt
C:\Documents and Settings\Stephen\Cookies\stephen@virginmedia.gamesplanet[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@server.iad.liveperson[5].txt
C:\Documents and Settings\Stephen\Cookies\stephen@viaviralvideo.112.2o7[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@websponsors[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@stats.starfeeder.gameriot[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@admarketplace[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@microsoftwlmessengermkt.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.cnn[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@f2network.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@avl.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@l1.qsstats[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@myaccount.turbine[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@bob.elitepvpers[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adecn[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@rambler[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@track.adform[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@breakmedia.checkm8[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@edge.ru4[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@madethecut.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@pentonmedia.122.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.elitepvpers[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@rts.pgmediaserve[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@optimize.indieclick[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@rotator.adjuggler[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@oasn03.247realmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.justrelevant[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ice.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@eyewonder[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www8.addfreestats[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@estat[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@msnbc.112.2o7[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@grandcanyonuniversity.122.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@lucidmedia[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.googleadservices[6].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adxpansion[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@jsfp.coremetrics[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.burstnet[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@clicksor[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.linktrack66[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@googleads.g.doubleclick[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@uol.realmedia[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@counter1.wt.twt[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@usnews.122.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.googleadservices[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@server.iad.liveperson[7].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ru4[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads2.net-communities.co[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ev.ads.pointroll[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@clickaider[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@optimost[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.halstats[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@pointroll[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.tracklead[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@sales.liveperson[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@trafficmaniax[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@classmates.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@loreal.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@1.sharkadnetwork[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@philips.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@tsprotraffic[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@stat.onestat[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@doubletrack[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ehg-gamespyinc.hitbox[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.tooshocking[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@media.photobucket[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@tracking1.aleadpay[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.googleadservices[3].txt
C:\Documents and Settings\Stephen\Cookies\stephen@mywebsearch[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.fpctraffic2[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@amazonmerchants.122.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@media.funpic[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.greedybleeps[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@bdsm[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@programs.wegcash[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@greedybleeps[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@elitepvpers[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@affiliate.zantracker[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@tracking.foxnews[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@d.mediaforceads[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@account.live[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adx.bidsystem[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@server.iad.liveperson[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@liveperson[3].txt
C:\Documents and Settings\Stephen\Cookies\stephen@traveladvertising[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.asp[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@mediaffiliation[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.neudesicmediagroup[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@stats.hellforge.gameriot[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@media.adfrontiers[1].txt
C:\Documents and Settings\Stephen\Cookies\anyuser@www.burstnet[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@avgtechnologies.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.windowsmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@media.pc.ign[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@stats.paste2[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@oasn04.247realmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@msnaccountservices.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.addynamix[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.pugetsoundsoftware[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@naked[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adknowledge[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adxpose[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@tracking.keywordmax[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@tracker.interclimax[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@draftfcb.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adserving.contextualmarketplace[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@filthybleepz[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@server.iad.liveperson[8].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ts.protraffic[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ad.amateurmatch[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.audxch[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@cdn.at.atwola[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@content.yieldmanager[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@hon.esportmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@legolas-media[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@virginmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@liveperson[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@paypal.112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.blogstandmedia[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@steelhousemedia[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@liveperson[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads1.exgfnetwork[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@blogstandmedia[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@clients.pointroll[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.eyecuedigital[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@counter1.wt.twt[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.adgoto[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.gmodules[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@secure.webpower[2].txt
C:\Documents and Settings\Stephen\Cookies\stephen@data.coremetrics[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.likecrack[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@tns-counter[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@ads.zeusclicks[2].txt
C:\Documents and Settings\Stephen\Cookies\anyuser@www.burstbeacon[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.googleadservices[5].txt
C:\Documents and Settings\Stephen\Cookies\stephen@adv.dmv[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@sales.liveperson[7].txt
C:\Documents and Settings\Stephen\Cookies\stephen@112.2o7[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@www.googleadservices[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@esportmedia[1].txt
C:\Documents and Settings\Stephen\Cookies\anyuser@doubleclick[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@in.getclicky[1].txt
C:\Documents and Settings\Stephen\Cookies\stephen@liveperson[5].txt
2mdn.net [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
advprotraffic.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
cdn.insights.gravity.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
cdn2.themis-media.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
cdn4.specificclick.net [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
content.oddcast.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
core.insightexpressai.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
crackle.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
ds.serving-sys.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
ec.atdmt.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
enterotracker.de [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
googleads.g.doubleclick.net [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
ia.media-imdb.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
interclick.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
m1.2mdn.net [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
media.dormitory.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
media.giantbomb.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
media.ign.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
media.mtvnservices.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
media.nintendo.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
media.resulthost.org [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
media.scanscout.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
media.uniquepeek.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
media1.break.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
msnbcmedia.msn.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
naiadsystems.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
objects.tremormedia.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
oddcast.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
s0.2mdn.net [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
secure-us.imrworldwide.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
spe.atdmt.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
static.esportmedia.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
static.themis-media.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
udn.specificclick.net [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
us.media.blizzard.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
www.crackle.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
www.naiadsystems.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]
www.oneclicktube.com [ C:\Documents and Settings\Stephen\Application Data\Macromedia\Flash Player\#SharedObjects\YT34HC65 ]

Adware.Flash Tracking Cookie
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\IA.MEDIA-IMDB.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\MEDIA.IGN.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\MEDIA.MTVNSERVICES.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\MEDIA.RESULTHOST.ORG
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\MEDIA.SCANSCOUT.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\MEDIA.UNIQUEPEEK.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\MEDIA1.BREAK.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\MSNBCMEDIA.MSN.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\OBJECTS.TREMORMEDIA.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\I.ADULTSWIM.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\WWW.ADULTSWIM.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\INTERCLICK.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\UDN.SPECIFICCLICK.NET
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\CRACKLE.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\WWW.CRACKLE.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\NAIADSYSTEMS.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\WWW.NAIADSYSTEMS.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\2MDN.NET
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\M1.2MDN.NET
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\S0.2MDN.NET
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\SECURE-US.IMRWORLDWIDE.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\CONTENT.ODDCAST.COM
C:\Documents and Settings\Stephen\Application Data\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\YT34HC65\ODDCAST.COM

Trojan.Agent/Gen-Nullo[Short]
C:\SYSTEM VOLUME INFORMATION\_RESTORE{D24A3BE8-4CBB-48D0-81AD-ACAFA6A6C48B}\RP306\A0150308.EXE

#5 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:04:06 AM

Posted 22 July 2010 - 03:00 AM

Are you still seeing the same ports in listen mode?

#6 Steve156

Steve156
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:06 PM

Posted 22 July 2010 - 04:43 PM

I am seeing similar results from the ports..

I ran netstat.exe and come out with these results:
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1026 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1782 127.0.0.1:1783 ESTABLISHED
TCP 127.0.0.1:1783 127.0.0.1:1782 ESTABLISHED
TCP 127.0.0.1:1784 127.0.0.1:1785 ESTABLISHED
TCP 127.0.0.1:1785 127.0.0.1:1784 ESTABLISHED
TCP 192.168.1.101:139 0.0.0.0:0 LISTENING
TCP 192.168.1.101:1792 74.125.159.101:80 TIME_WAIT
TCP [::]:135 [::]:0 LISTENING 0
UDP 0.0.0.0:445 *:*
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:4500 *:*
UDP 127.0.0.1:123 *:*
UDP 127.0.0.1:1900 *:*
UDP 192.168.1.101:123 *:*
UDP 192.168.1.101:137 *:*
UDP 192.168.1.101:138 *:*
UDP 192.168.1.101:1900 *:*

What I'm worried about is <u>my</u> ports that are connected to <u>my</u> ports.. But, I heard from someone that these ports might be used by programs that are valid...
If it's possible, could you tell me a way to close these ports that are "listening"? (udp port closing information would also be appreciated)
I understand that some of these ports are run by the system.. I bet I would like to keep my routing protocol working..
Lastly, do I need NetBIOS if I don't share files or printers?..

#7 cryptodan

cryptodan

    Bleepin Madman


  • Members
  • 21,868 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Catonsville, Md
  • Local time:04:06 AM

Posted 22 July 2010 - 04:52 PM

try netstat -ano

then bring up Task Manager and go to view then select columns and select PID and match it that connection in the listing of netstat.

#8 Steve156

Steve156
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:11:06 PM

Posted 22 July 2010 - 07:09 PM

ok..
Here's the results with the task manager's "Image Name" listed on the far right for each.

TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 1060 svchost.exe
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4 system
TCP 127.0.0.1:1026 0.0.0.0:0 LISTENING 1724 alg.exe
TCP 127.0.0.1:1782 127.0.0.1:1783 ESTABLISHED 1308 firefox.exe
TCP 127.0.0.1:1783 127.0.0.1:1782 ESTABLISHED 1308 firefox.exe
TCP 127.0.0.1:1784 127.0.0.1:1785 ESTABLISHED 1308 firefox.exe
TCP 127.0.0.1:1785 127.0.0.1:1784 ESTABLISHED 1308 firefox.exe
TCP 192.168.1.101:139 0.0.0.0:0 LISTENING 4 system
TCP [::]:135 [::]:0 LISTENING 1060 svchost.exe
UDP 0.0.0.0:445 *:* 4 system
UDP 0.0.0.0:500 *:* 848 lsass.exe
UDP 0.0.0.0:4500 *:* 848 lsass.exe
UDP 127.0.0.1:123 *:* 1100 svchost.exe
UDP 127.0.0.1:1900 *:* 1236 svchost.exe
UDP 192.168.1.101:123 *:* 1100 svchost.exe
UDP 192.168.1.101:137 *:* 4 system
UDP 192.168.1.101:138 *:* 4 system
UDP 192.168.1.101:1900 *:* 1236 svchost.exe

I wonder about svchost.exe and system..
..how do I know that lsass.exe or other files haven't been corrupted?
..is there a reference page by Microsoft or someone that shows file checks, such as a CRC32, or MD5, or.. other?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users