Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

More can't boot safe mode after malware cleanup


  • Please log in to reply
9 replies to this topic

#1 jstacer

jstacer

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Blue Grass, IA USA
  • Local time:08:48 PM

Posted 06 January 2011 - 11:02 AM

Didn't find bad drivers preventing safe boot so I'm back here hoping to find cause. Below is link to thread in XP forum:

http://www.bleepingcomputer.com/forums/topic359879.html/page__st__60__gopid__2082635#entry2082635

NTBTlog is last entry in that thread.

BC AdBot (Login to Remove)

 


#2 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:12:48 PM

Posted 06 January 2011 - 11:56 PM

For reference, previous topics, same issue faced by jstacer:

Posted 11 September 2010 - 10:38 AM .... boopme
http://www.bleepingcomputer.com/forums/topic346542.html

Posted 19 October 2010 - 04:06 AM ...... boopme & Didier Stevens
http://www.bleepingcomputer.com/forums/topic354506.html

Posted 25 October 2010 - 06:18 AM .... myrti
http://www.bleepingcomputer.com/forums/topic356014.html

Can't boot safe mode after cleaning up malware
Posted 12 November 2010 - 05:18 AM ... in XP forum ... cryptodan & AustrAlien
http://www.bleepingcomputer.com/forums/topic359879.html
***************************

Please do the following:

:step1: Empty your temp folders using TFC (Temporary File Cleaner) in Safe Mode
  • Please download TFC by Old Timer and save it to your desktop.
    alternate download link
  • Run TFC:
  • Save any unsaved work. (TFC will close ALL open programs including your browser!)
  • Double-click on TFC.exe to run it. (If you are using Vista, right-click on the file and choose "Run As Administrator".)
  • Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
  • Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway allowing Windows to load normally to ensure a complete clean.

:step2: Scan with SUPERAntiSpyware <<< I am assuming that SAS is still installed on your machine
  • Open SAS and update the definitions before scanning by selecting "Check for Updates".
    (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
  • Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all others unchecked):
  • Close browsers before scanning.
  • Scan for tracking cookies.
  • Terminate memory threats before quarantining.
Scan with SUPERAntiSpyware as follows:
  • On the main screen, under "Scan for Harmful Software" click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive.
  • On the right, under "Complete Scan", choose Perform Complete Scan and click "Next".
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes" and reboot normally.
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.
  • Click Close to exit the program.
If you have a problem downloading, installing or getting SAS to run, try downloading and using the SUPERAntiSpyware Portable Scanner instead. Save the randomly named file (i.e. SAS_1710895.COM) to a usb drive or CD and transfer to the infected computer. Then double-click on it to launch and scan. The file is randomly named to help keep malware from blocking the scanner.

:exclame: Attempt to boot in Safe Mode: Success?

Edited by AustrAlien, 07 January 2011 - 01:13 AM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#3 jstacer

jstacer
  • Topic Starter

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Blue Grass, IA USA
  • Local time:08:48 PM

Posted 07 January 2011 - 01:48 PM

Ran TFC and rebooted.
Downloaded SAS, updated it and ran per instructions, deleted all flagged items and rebooted.
Tried rebooting in safe mode without success; same blue screen.

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 01/07/2011 at 12:04 PM

Application Version : 4.47.1000

Core Rules Database Version : 6154
Trace Rules Database Version: 3966

Scan type : Complete Scan
Total Scan Time : 04:19:46

Memory items scanned : 595
Memory threats detected : 0
Registry items scanned : 8854
Registry threats detected : 3
File items scanned : 147351
File threats detected : 565

Adware.Tracking Cookie
D:\Documents and Settings\John Stacer\Cookies\john_stacer@advertising[2].txt
D:\Documents and Settings\John Stacer\Cookies\john_stacer@account.live[2].txt
D:\Documents and Settings\John Stacer\Cookies\john_stacer@doubleclick[1].txt
D:\Documents and Settings\John Stacer\Cookies\john_stacer@microsoftwga.112.2o7[1].txt
D:\Documents and Settings\John Stacer\Cookies\john_stacer@msnportal.112.2o7[1].txt
D:\Documents and Settings\John Stacer\Cookies\john_stacer@interclick[1].txt
D:\Documents and Settings\John Stacer\Cookies\john_stacer@www.mynortonaccount[1].txt
D:\Documents and Settings\John Stacer\Cookies\john_stacer@specificclick[2].txt
D:\Documents and Settings\John Stacer\Cookies\john_stacer@ads.ookla[2].txt
D:\Documents and Settings\John Stacer\Cookies\john_stacer@atdmt[1].txt
D:\Documents and Settings\John Stacer\Cookies\john_stacer@statse.webtrendslive[1].txt
D:\Documents and Settings\John Stacer\Cookies\john_stacer@tribalfusion[1].txt
msnbcmedia.msn.com [ C:\WINDOWS\Application Data\Macromedia\Flash Player\#SharedObjects\WRNHGQ8V ]
counter2.hitslink.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
counter2.hitslink.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
counter2.hitslink.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
counter2.hitslink.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.doubleclick.net [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.mediaplex.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.valueclick.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.apmebf.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.bfast.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.mediaplex.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.stats.esomniture.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.atdmt.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.tribalfusion.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.perf.overture.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.track.roiservice.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
statse.webtrendslive.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
statse.webtrendslive.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
statse.webtrendslive.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
statse.webtrendslive.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
statse.webtrendslive.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.y-1shz2prbmdj6wvny-1sez2pra2dj6wjnyckdjahpqqdj6x9ny-1seq-2-2.stats.esomniture.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
banners.guns.ru [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.imrworldwide.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.imrworldwide.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.y-1shz2prbmdj6wvny-1sez2pra2dj6wjk4aicjoeoqudj6x9ny-1seq-2-2.stats.esomniture.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.a-1shz2prbmdj6wvny-1sez2pra2dj6wjkykkdzohpa-1dj6x9ny-1seq-2-2.stats.esomniture.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.y-1shz2prbmdj6wvny-1sez2pra2dj6wjnywmdjslpa2dj6x9ny-1seq-2-2.stats.esomniture.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.y-1shz2prbmdj6wvny-1sez2pra2dj6wjlyooazcgoqydj6x9ny-1seq-2-2.stats.esomniture.com [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.2o7.net [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.2o7.net [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
.2o7.net [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
www.keygen.us [ C:\WINDOWS\Application Data\Mozilla\Firefox\Profiles\fvvi95o0.default\cookies.txt ]
C:\WINDOWS\Cookies\jstacer@adknowledge[1].txt
C:\WINDOWS\Cookies\jstacer@clickfrom.buy[1].txt
C:\WINDOWS\Cookies\jstacer@techtracker[1].txt
C:\WINDOWS\Cookies\jstacer@insightexpress[2].txt
C:\WINDOWS\Cookies\jstacer@www.burstbeacon[1].txt
C:\WINDOWS\Cookies\jstacer@counter[1].txt
C:\WINDOWS\Cookies\jstacer@cz4.clickzs[2].txt
C:\WINDOWS\Cookies\jstacer@toplist[2].txt
C:\WINDOWS\Cookies\jstacer@image.masterstats[1].txt
C:\WINDOWS\Cookies\jstacer@arscounter[1].txt
C:\WINDOWS\Cookies\jstacer@atwola[1].txt
C:\WINDOWS\Cookies\jstacer@superstats[1].txt
C:\WINDOWS\Cookies\jstacer@ads.msn.co[1].txt
C:\WINDOWS\Cookies\jstacer@cz3.clickzs[2].txt
C:\WINDOWS\Cookies\jstacer@toplist[3].txt
C:\WINDOWS\Cookies\jstacer@windowsmedia[2].txt
C:\WINDOWS\Cookies\jstacer@www.keepmedia[2].txt
C:\WINDOWS\Cookies\jstacer@insightfirst[2].txt
C:\WINDOWS\Cookies\jstacer@nextag[2].txt
C:\WINDOWS\Cookies\jstacer@optimost[1].txt
C:\WINDOWS\Cookies\jstacer@azjmp[2].txt
C:\WINDOWS\Cookies\jstacer@yadro[1].txt
C:\WINDOWS\Cookies\jstacer@cz6.clickzs[1].txt
C:\WINDOWS\Cookies\jstacer@ads.zap2it[2].txt
C:\WINDOWS\Cookies\jstacer@sales.liveperson[2].txt
C:\WINDOWS\Cookies\jstacer@tdstats[1].txt
C:\WINDOWS\Cookies\jstacer@chokertraffic[2].txt
C:\WINDOWS\Cookies\jstacer@stormingmedia[1].txt
C:\WINDOWS\Cookies\jstacer@interclick[2].txt
C:\WINDOWS\Cookies\jstacer@atwola[3].txt
C:\WINDOWS\Cookies\jstacer@ad-rotator[2].txt
C:\WINDOWS\Cookies\jstacer@burstnet[2].txt
.adserver.adtechus.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ads.bridgetrack.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ads.bridgetrack.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.adxpansion.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.interclick.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.interclick.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.a1.interclick.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.a1.interclick.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.interclick.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.revsci.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificmedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
z.blogads.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.fastclick.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.fastclick.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.fastclick.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.liveperson.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.liveperson.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.liveperson.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.liveperson.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.sportsmansguide.122.2o7.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.adinterax.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.adinterax.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.doubleclick.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.atdmt.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.atdmt.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tribalfusion.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.pointroll.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.pointroll.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.kontera.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.imrworldwide.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.imrworldwide.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.apmebf.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.mediaplex.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.mediaplex.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.questionmarket.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.kontera.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.kontera.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media6degrees.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media6degrees.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media6degrees.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.legolas-media.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
s07.flagcounter.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.2o7.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.qnsr.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.qnsr.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
www.qsstats.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
www.qsstats.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.bs.serving-sys.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.legolas-media.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.zedo.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.zedo.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media6degrees.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.burstnet.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.steelhousemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.steelhousemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.steelhousemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.fastclick.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.e-2dj6aekychazwlp.stats.esomniture.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.adserver.adtechus.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.e-2dj6wnmyqld5ekp.stats.esomniture.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tacoda.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tacoda.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tacoda.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ru4.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ru4.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.yieldmanager.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.e-2dj6wjl4cpczoeq.stats.esomniture.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.paypal.112.2o7.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.eset.122.2o7.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ehg-eset.hitbox.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.hitbox.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.steelhousemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.steelhousemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.steelhousemedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media6degrees.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media6degrees.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.at.atwola.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.at.atwola.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.collective-media.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.collective-media.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.chitika.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.pro-market.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.pro-market.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ru4.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.pro-market.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.adbrite.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.adbrite.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ru4.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ru4.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ru4.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.legolas-media.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.apmebf.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.pro-market.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.spylog.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.rambler.ru [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.hotlog.ru [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.questionmarket.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.liveperson.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.googleads.g.doubleclick.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
www.googleadservices.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.hypertracker.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.driverfinderpro.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.driverfinderpro.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.gostats.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.yadro.ru [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
www.googleadservices.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.smartadserver.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.smartadserver.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.smartadserver.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.smartadserver.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.insightexpressai.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.xiti.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tacoda.at.atwola.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tacoda.at.atwola.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.a1.interclick.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.revsci.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.revsci.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.revsci.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.revsci.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.statcounter.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.collective-media.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.collective-media.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.2o7.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.2o7.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.adbrite.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.interclick.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media.adfrontiers.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficmp.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficmp.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media.adfrontiers.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficmp.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.fastclick.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.content.yieldmanager.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.doubleclick.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.dealtime.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.stat.dealtime.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
stat.dealtime.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.dealtime.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.mediaplex.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.qksrv.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.qksrv.net [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.apmebf.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.apmebf.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.adultfriendfinder.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.y-1shz2prbmdj6wvny-1sez2pra2dj6wjloohczicpgwdj6x9ny-1seq-2-2.stats.esomniture.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.y-1shz2prbmdj6wvny-1sez2pra2dj6wjkykmd5cdpwmdj6x9ny-1seq-2-2.stats.esomniture.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.y-1shz2prbmdj6wvny-1sez2pra2dj6wjkoejdzsbpq6dj6x9ny-1seq-2-2.stats.esomniture.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.bizrate.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.bizrate.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.locator.metadata.windowsmedia.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.burstnet.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.adknowledge.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ D:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
H:\Documents and Settings\John Stacer\Cookies\john_stacer@ads.ookla[2].txt
H:\Documents and Settings\John Stacer\Cookies\john_stacer@interclick[1].txt
H:\Documents and Settings\John Stacer\Cookies\john_stacer@www.mynortonaccount[1].txt
H:\Documents and Settings\John Stacer\Cookies\john_stacer@account.live[2].txt
.kanoodle.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificmedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.a1.interclick.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media6degrees.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media6degrees.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media6degrees.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tracking.foxnews.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tracking.foxnews.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.invitemedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.collective-media.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tracking.realtor.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
rts.pgmediaserve.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.chitika.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media6degrees.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
www.clickmanage.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
www.clickmanage.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.webstats4u.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media6degrees.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.crackle.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.thefind.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.thefind.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.thefind.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.thefind.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.bizrate.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ads.lucidmedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
bridge2.admarketplace.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.msnportal.112.2o7.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.questionmarket.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.yieldmanager.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficmp.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficmp.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficmp.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficmp.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficmp.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.247realmedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.apmebf.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.mediaplex.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
statse.webtrendslive.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.sportsmansguide.122.2o7.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
server.iad.liveperson.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
sales.liveperson.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
sales.liveperson.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
server.iad.liveperson.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
rotator.adjuggler.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
rotator.adjuggler.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.statcounter.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.statcounter.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.statcounter.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
cdn4.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
cdn4.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.pointroll.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ads.pointroll.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.edge.ru4.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.edge.ru4.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
citi.bridgetrack.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
citi.bridgetrack.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.statcounter.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.statcounter.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.statcounter.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.statcounter.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.statcounter.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.casalemedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.casalemedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.casalemedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.kontera.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.mediaplex.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.revsci.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.statcounter.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.socialmedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.enhance.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.dr.findlinks.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.pointroll.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tacoda.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tacoda.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tacoda.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.statcounter.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media.brandreachsys.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.media.brandreachsys.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.toplist.cz [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
teens-empire.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.dmtracker.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.revsci.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.revsci.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.paypal.112.2o7.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
media.adrevolver.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
www3.addfreestats.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.apmebf.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.qksrv.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.qksrv.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
stats.townnews.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
stats.townnews.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
stats.townnews.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
stats.townnews.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.leeenterprises.112.2o7.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
stats.townnews.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
stats.townnews.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
stats.townnews.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
stats.townnews.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.statcounter.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.revenue.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.bs.serving-sys.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.serving-sys.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.questionmarket.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.interclick.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.interclick.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.atdmt.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.atdmt.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ads.bridgetrack.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.iacas.adbureau.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.iacas.adbureau.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.iacas.adbureau.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.imrworldwide.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.imrworldwide.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ice.112.2o7.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
dc.tremormedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ads.crakmedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.adbrite.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.adbrite.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.adbrite.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.247realmedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
adprotraffic.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
tsprotraffic.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.adbrite.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.adxpansion.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.revsci.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.interclick.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.zedo.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.zedo.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.ero-advertising.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.legolas-media.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.getrightporn.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.getrightporn.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.cz3.clickzs.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.cz3.clickzs.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.admediaprovider.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.admediaprovider.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
stats.rudeshare.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.advertising.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.realmedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.realmedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.fastclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.fastclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.fastclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.doubleclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.naiadsystems.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.naiadsystems.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
momcj.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.atdmt.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.atdmt.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.casalemedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.tribalfusion.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad.yieldmanager.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
ad2protraffic.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.content.yieldmanager.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficholder.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficmp.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficmp.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficholder.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.trafficholder.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
momcj.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
momcj.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\Firefox\Profiles\e6ettdpo.default\cookies.sqlite ]
.doubleclick.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.dealtime.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.stat.dealtime.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
stat.dealtime.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.dealtime.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.mediaplex.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.qksrv.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.qksrv.net [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.apmebf.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.apmebf.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.adultfriendfinder.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.sextracker.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.y-1shz2prbmdj6wvny-1sez2pra2dj6wjloohczicpgwdj6x9ny-1seq-2-2.stats.esomniture.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.y-1shz2prbmdj6wvny-1sez2pra2dj6wjkykmd5cdpwmdj6x9ny-1seq-2-2.stats.esomniture.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.y-1shz2prbmdj6wvny-1sez2pra2dj6wjkoejdzsbpq6dj6x9ny-1seq-2-2.stats.esomniture.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.bizrate.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.bizrate.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.locator.metadata.windowsmedia.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.burstnet.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.adknowledge.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
.statse.webtrendslive.com [ H:\Documents and Settings\John Stacer\Application Data\Mozilla\2rbl9hjs.Default User\cookies.txt ]
oddcast.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
adknowledge.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
web.adknowledge.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
media1.break.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
files.adbrite.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
interclick.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
media.tattomedia.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
media.scanscout.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
naiadsystems.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
insight.randomhouse.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
objects.tremormedia.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
m1.2mdn.net [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
googleads.g.doubleclick.net [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
bannerfarm.ace.advertising.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
content.yieldmanager.edgesuite.net [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
spe.atdmt.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
crackle.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
udn.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
msnbcmedia.msn.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
media.vmixcore.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
ds.serving-sys.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
cdn4.specificclick.net [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
ec.atdmt.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]
secure-us.imrworldwide.com [ H:\Documents and Settings\John Stacer\Application Data\Macromedia\Flash Player\#SharedObjects\PC7ZKV75 ]

Disabled.SecurityCenterOption
HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER#ANTIVIRUSDISABLENOTIFY
HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER#FIREWALLDISABLENOTIFY

Rogue.Pallidium
HKU\S-1-5-21-1004336348-651377827-682003330-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS#WARNONPOSTREDIRECT

Trojan.Agent/Gen
D:\DOCUMENTS AND SETTINGS\JOHN STACER\DESKTOP\TFC.EXE
D:\WINDOWS\Prefetch\TFC.EXE-29BA261B.pf

#4 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:12:48 PM

Posted 07 January 2011 - 06:16 PM

Note: Print out these instructions or copy them to a Notepad file so they will be accessible.

Please download Dr.Web CureIt and save it to your desktop.
alternate download link
Note: The file will be randomly named (i.e. 5mkuvc4z.exe).

Scan with Dr.Web CureIt as follows:
  • Double-click on the randomly named file to open the program and click Start.
    (There is no need to update if you just downloaded the most current version)
  • Read the anti-virus check by DrWeb scanner prompt and click Ok where asked to Start scan now?
    (Allow the setup.exe to load if asked by any of your security programs.)

    There could be an extra step or two in here after the release of new version of DrWeb, whereby you need to choose a "protection mode" ... ?
  • The Express scan will automatically begin.
    (This is a short scan of files currently running in memory, boot sectors, and targeted folders). <<< but it may seem to take a long time!
  • If prompted to download the Full version Free Trial, ignore and click the X to close the window.
  • If an infected object is found, you will be prompted to move anything that cannot be cured. Click Yes to All.
    (This will move any detected files to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if they can't be cured)
  • After the Express Scan is finished, put a check next to Complete scan to scan all local disks and removable media.
  • In the top menu, click Settings > Change settings, and uncheck "Heuristic analysis" under the "Scanning" tab, then click Apply, Ok.
  • Back at the main window, click the green arrow "Start Scanning" button on the right under the Dr.Web logo.
    Please be patient as this scan could take a long time to complete.
  • When the scan has finished, a message will be displayed at the bottom indicating if any viruses were found.
  • Click Select All, then choose Cure > Move incurable.
  • In the top menu, click file and choose save report list.
  • Save the DrWeb.csv report to your desktop.
  • Exit Dr.Web Cureit when done.
  • Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
After reboot, post the contents of the log from Dr.Web in your next reply. (You can use Notepad to open the DrWeb.cvs report)

:exclame: Attempt to boot in Safe Mode: Success?

Edited by AustrAlien, 07 January 2011 - 06:18 PM.

AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#5 jstacer

jstacer
  • Topic Starter

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Blue Grass, IA USA
  • Local time:08:48 PM

Posted 08 January 2011 - 10:07 AM

Drweb appears to be still running after 10 hours. I trie to terminate by ending random name task and by terminating random-name process but no success. Should it take this long or should I reboot and try to run scan again?

Russians have taken over my computer...next the world!

#6 jstacer

jstacer
  • Topic Starter

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Blue Grass, IA USA
  • Local time:08:48 PM

Posted 08 January 2011 - 10:33 AM

Tried to run the scan again after dirty shutdown...same thing. I get a message about protected mode when I try to run the program but it goes by so fast I can't read it. It appears that DRweb is not going to run on my computer.

#7 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:12:48 PM

Posted 09 January 2011 - 01:04 AM

Since DrWeb is giving you a bit of trouble, let's move on ....

Please perform a scan with Kaspersky Online Virus Scanner.
-- Requires free Java Runtime Environment (JRE) to be installed before scanning for malware as ActiveX is no longer being used.
-- This scan will not remove any detected file threats but it will show where they are located so they can be cleaned with other tools.
  • Vista users need to right-click the IE or FF Start Menu or Quick Launch Bar icons and Run As Administrator from the context menu.
  • Read the "Advantages - Requirements and Limitations" then press the Posted Image... button.
  • You will be prompted to install an application from Kaspersky. Click the Run button. It will start downloading and installing the scanner and virus definitions.
  • When the downloads have finished, you should see 'Database is updated. Ready to scan'. Click on the Posted Image... button.
  • Make sure these boxes are checked. By default, they should be. If not, please check them and click on the Posted Image... button afterwards:
    • Detect malicious programs of the following categories:
      Viruses, Worms, Trojan Horses, Rootkits
      Spyware, Adware, Dialers and other potentially dangerous programs
    • Scan compound files (doesn't apply to the File scan area):
      Archives
      Mail databases
  • Click on My Computer under the Scan section. OK any warnings from your protection programs.
  • The scan will take a while so be patient and do NOT use the computer while the scan is running. Keep all other programs and windows closed.
  • Once the scan is complete (the 'status' will show complete), click on View Scan Report and any infected objects will be shown.
  • Click on Save Report As... and change the Files of type to Text file (.txt)
  • Name the file KAVScan_ddmmyy (day, month, year) before clicking on the Save button and save it to your Desktop.
  • Copy and paste (Ctrl+C) the saved scan results from that file in your next reply.
-- Note: Some online scanners will detect existing anti-virus software and refuse to cooperate. You may have to disable the real-time protection components of your existing anti-virus and try running the scan again. If you do this, remember to turn them back on after you are finished.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image

#8 jstacer

jstacer
  • Topic Starter

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Blue Grass, IA USA
  • Local time:08:48 PM

Posted 09 January 2011 - 03:57 PM

Unable to get Kaspersky to run. It completed download and update, then did not complete the second update sequence. Got a message to scan from Kaspersky web site as license had expired. I rebooted, disabled firewall and McAfee and tried the process from your link again with same result.

Unable to get Kaspersky to run. It completed download and update, then did not complete the second update sequence. Got a message to scan from Kaspersky web site as license had expired. I rebooted, disabled firewall and McAfee and tried the process from your link again with same result.

#9 jstacer

jstacer
  • Topic Starter

  • Members
  • 122 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Blue Grass, IA USA
  • Local time:08:48 PM

Posted 30 January 2011 - 02:35 PM

This is a response to post #4. I finally got DrWeb to run. Only the first two items were on my system drive. The rest were on G and H drives.

CouponPrinter.ocx;D:\WINDOWS;Adware.Coupons.34;Incurable.Moved.;
A0008001.com;D:\System Volume Information\_restore{84303D90-1B67-4251-AC0B-2AF6B6B415D8}\RP10;Trojan.MulDrop1.46285;Incurable.Moved.;
7d9cc142c2a7d0.bup\stream000;H:\Documents and Settings\All Users\Application Data\McAfee\VirusScan\Quarantine\7d9cc142c2a7d0.bup;Trojan.Fakealert.13714;;
7d9cc142c2a7d0.bup;H:\Documents and Settings\All Users\Application Data\McAfee\VirusScan\Quarantine;Container contains infected objects;Moved.;
7d9cc142c2f1f40.bup\stream000;H:\Documents and Settings\All Users\Application Data\McAfee\VirusScan\Quarantine\7d9cc142c2f1f40.bup;Trojan.Fakealert.13714;;
7d9cc142c2f1f40.bup;H:\Documents and Settings\All Users\Application Data\McAfee\VirusScan\Quarantine;Container contains infected objects;Moved.;

#10 AustrAlien

AustrAlien

    Inquisitor


  • Members
  • 6,772 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Cowra NSW Australia
  • Local time:12:48 PM

Posted 11 February 2011 - 01:24 AM

Your previous logs indicate a number of old and out-dated entries pertaining to Java, which need to be removed:
post #3: http://www.bleepingcomputer.com/forums/topic356014.html/page__view__findpost__p__2000504

"{26A24AE4-039D-4CA4-87B4-2F83216012FF}" = Java™ 6 Update 21
"{3248F0A8-6813-11D6-A77B-00B0D0150000}" = J2SE Runtime Environment 5.0
"{3248F0A8-6813-11D6-A77B-00B0D0150010}" = J2SE Runtime Environment 5.0 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0150020}" = J2SE Runtime Environment 5.0 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0150040}" = J2SE Runtime Environment 5.0 Update 4
"{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0150090}" = J2SE Runtime Environment 5.0 Update 9
"{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10
"{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java™ SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java™ 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java™ 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater


The most recent version of Java is:
Java SE Runtime Environment (JRE)
Version Number: 6.0 Update 23

---------------------------------------

Important Note: Your version of Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system. Microsoft: ‘Unprecedented Wave of Java Exploitation’
Drive-by Trojan preying on out-of-date Java installations
Ghosts of Java Haunt UsersPlease follow these steps to remove older version Java components and update:
  • Download the latest version of Java Runtime Environment (JRE) Version 6 and save it to your desktop.
  • Look for "Java Platform, Standard Edition".
  • Click the "Download JRE" button to the right.
  • Select your Platform: "Windows" (32-bit) or "Windows x64" (64-bit).
  • Select your Language: "Multi-language".
  • Read the License Agreement, and then check the box that says: "I agree to the Java SE...License Agreement".
  • Click Continue and the page will refresh.
  • Under Required Files, check the box for Windows Offline Installation, click the link below it and save the file to your desktop.
  • Close any programs you may have running - especially your web browser.
Go to Posted Image > Control Panel, double-click on Add/Remove Programs or Programs and Features in Vista/Windows 7 and remove all older versions of Java.
  • Check (highlight) any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button and follow the onscreen instructions for the Java uninstaller.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-6u23-windows-i586.exe to install the newest version.
  • If using Windows 7 or Vista and the installer refuses to launch due to insufficient user permissions, then Run As Administrator.
  • When the Java Setup - Welcome window opens, click the Install > button.
  • If offered to install a Toolbar, just uncheck the box before continuing unless you want it.
-- Starting with Java 6u10, the uninstaller incorporated in each new release uses Enhanced Auto update to automatically remove the previous version when updating to a later update release. It will not remove older versions, so they will need to be removed manually.
-- Java is updated frequently. If you want to be automatically notified of future updates, just turn on the Java Automatic Update feature and you will not have to remember to update when Java releases a new version.


Note: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications but it's not necessary.
To disable the JQS service if you don't want to use it:
  • Go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter.
  • Click Ok and reboot your computer.

(the instructions above provided courtesy of quietman7)

Please let me know if the above task was completed successfully.
AustrAlien
Google is my friend. Make Google your friend too.

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users