Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Removed Windows XP Fix Virus but icon still remains


  • Please log in to reply
19 replies to this topic

#1 LadyLuddite

LadyLuddite

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 28 July 2011 - 11:57 AM

First of all, I have to say that you people who run this site are AWESOME. Thank you, thank you, thank you for all you do to help us poor souls who find ourselves in a computer predicament.

Yesterday I tackled fixing the Windows XP Fix virus on my Dell using your instructions. I started by rebooting in Safe Mode with Networking (since the virus wouldn't let me do anything in normal mode). I downloaded rkill and ran it; it found nothing. I ran it again; still found nothing. So I moved on. I downloaded TDSSKiller per step 5 of your instructions and ran it; it also found nothing. So I downloaded MalwareBytes AM per step 6, ran the full scan, and it found 12 infected objects, which I then deleted. Per MalwareBytes AM instructions, I rebooted the computer, which then went came back up in normal mode.

I had nothing at all on my desktop, and clicking "Start" brought up nothing, so I rebooted in Safe Mode with Networking again and downloaded unhide.exe per step 18. After running unhide, I still had nothing on my desktop but when I clicked on "Start", I could see most (but not all) things that I should. However, when I looked at All Programs, some of them (but not all) were still empty. At that point I gave up and went to bed.

Today, I decided to do the whole thing over again, but this time in normal mode, not safe mode. So I downloaded rkill and ran it again; still found nothing. I downloaded TDSSKiller again and ran it; still nothing. I downloaded MalwareBytes AM again and ran it; this time it found 2 more infected objects, which I then deleted. Lastly, I downloaded unhide again, ran it, and lo and behold, the rest of my hidden programs came back! Thank you!

However - on my desktop, and in "All Programs", there is STILL the icon for Windows XP Fix! When I hold the mouse over the icon in All Programs, it shows me two options: "Uninstall Windows XP Fix", or just "Windows XP Fix" which I presume means "run the program." I'm afraid to click "Uninstall Windox XP Fix" as I am afraid of what might happen, and I sure as heck am not going to click the other icon and run the stupid thing. Can you please advise me on what I should do? Thanks so much.

BC AdBot (Login to Remove)

 


#2 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:12:27 PM

Posted 28 July 2011 - 03:02 PM

Hi LadyLuddite,

:welcome: to Bleeping Computer.

My name is Jason and I'll be helping you with your computer problems. You can call me by my screename jntkwx or Jason is fine.

Some things to remember while we are working together.

  • Do not run any other tool untill instructed to do so!
  • Please do not attach logs or put logs in code boxes.
  • Tell me about any problems that have occurred during the fix.
  • Tell me of any other symptoms you may be having as these can also help.
  • Do not run anything while running a fix.
  • If you don't understand a step, please ask for clarification before continuing with any future steps.

Click on the Watch Topic button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.

Note to others: The instructions here are intended for the person who began this topic. If you need help, please create your own topic in the appropriate forum.

 

:step1: Please download MiniToolBox and run it.

Checkmark following boxes:
  • List Installed Programs
  • List Users, Partitions and Memory size
Click Go . Please put code boxes around just this log, like this, but without the x: [xcode] MiniToolBox log [/xcode]

:step2: Rerun Malwarebytes (Full Scan. May take some time to complete. Please be patient.)
Open Malwarebytes, click on the Update tab, and click the check for Updates button.
  • If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
  • Exit MBAM when done.
Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

If you have trouble updating, troubleshoot Malwarebytes' Anti-Malware

:step3: Reboot into Normal mode. Next run Superantisypware (SAS):

Download and scan with SUPERAntiSpyware Free for Home Users
  • Double-click SUPERAntiSpyware.exe and use the default settings for installation.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from http://www.superantispyware.com/downloads/SASDEFINITIONS.EXE (copy and paste that website address) and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the Scanning Control tab.
  • Under Scanner Options make sure the following are checked (leave all others unchecked):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.
  • Click the "Close" button to leave the control center screen.
  • Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive.
  • On the right, under "Complete Scan", choose Perform Complete Scan.
  • Click "Next" to start the scan. Please be patient while it scans your computer.
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes".
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.
  • Click Close to exit the program.
If you have a problem downloading, installing or getting SAS to run, try downloading and using the SUPERAntiSpyware Portable Scanner instead. Save the randomly named file (i.e. SAS_1710895.COM) to a USB drive or CD and transfer to the infected computer. Then double-click on it to launch and scan. The file is randomly named to help keep malware from blocking the scanner.


In your next reply, please include:
  • MiniToolBox log
  • Malwarebytes log
  • SuperAntiSpyware log
  • How's your computer running now? Do you still have those icons?

Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#3 LadyLuddite

LadyLuddite
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 28 July 2011 - 07:50 PM

Jason, thank you so much. I just saw your note now and unfortunately, I can't do anything with my computer right now because we are leaving at 5 am tomorrow to go on vacation and my husband is bugging me to finish packing. I will get back to you in about 10 days after following all your instructions. Again, many thanks and I'll be talking with you as soon as I can!

#4 jntkwx

jntkwx

  • Malware Response Team
  • 4,339 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New England, U.S.A.
  • Local time:12:27 PM

Posted 28 July 2011 - 07:55 PM

Okay, sounds good. :thumbup2:
Please click on the Watch Topic button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.
Regards,
Jason

 

Simple and easy ways to keep your computer safe and secure on the Internet

If I am helping you and have not returned in 48 hours, please feel free to send me a PM with a link to the topic.
My help is free... however, if you wish to show appreciation and support me personally fighting against malware, please consider a donation: btn_donate_SM.gif


#5 LadyLuddite

LadyLuddite
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 28 July 2011 - 07:58 PM

I did do that, Jason, thanks - that's how I knew that you replied to me so quickly just now! We're actually heading up to your neck of the woods (according to your profile) - New England. Glad the hot weather has broken up there.

#6 LadyLuddite

LadyLuddite
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 12 August 2011 - 06:22 PM

Hi Jason - I'm back and I've done everything and am ready to send you the logs. However, my husband's name is all over the last log because there were tons of files found with problems, and the document file has his name. Is there any way I can send it to you privately, or do I just need to let it hang out here? FWIW, the Windows XP Fix icon is still there, both on the desktop and in the "All Programs" file. The first two programs found nothing, but SAS did (and that's the one with my husband's name on it <_< . Thanks.

#7 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,985 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:07:27 PM

Posted 13 August 2011 - 12:59 AM

Hello, because Jason is away, I'll take over this topic. Please post me only the MBAM log for now.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#8 Straythe

Straythe

  • Members
  • 124 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:11:27 AM

Posted 13 August 2011 - 01:11 AM

Hi, please note I'm just a civilian trying to help, not part of BC's team.

For the log, may I suggest doing a Find-Replace All to remove the names for posting? Then when you reply, note that Jason is unavailable right now and elise025 is handling his topics. (as posted here for example.)

Good luck!

edited to add: Yeep, she's quick.

Edited by Straythe, 13 August 2011 - 01:12 AM.

***"When you surround an enemy, leave an outlet free [...] to make him believe there is a road to safety, and thus prevent his fighting with the courage of despair." Sun Tzu ***

#9 LadyLuddite

LadyLuddite
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 14 August 2011 - 12:36 PM

Thanks, Elise and Straythe - excellent suggestion! I've replaced our last name with "X". I'll post the logs for all three below. I've put the code boxes around the MTB log as Jason asked; hope I've done it correctly.

Jason had also asked if the Windows XP Fix icon was still there after downloading and running all those programs, and sadly, it still is.

MiniToolBox log:

MiniToolBox by Farbar 
Ran by Mark X (administrator) on 12-08-2011 at 14:19:18
Microsoft Windows XP Service Pack 3 (X86)

***************************************************************************

=========================== Installed Programs ============================

Adobe AIR (Version: 1.0.4990)
Adobe AIR (Version: 1.0.8.4990)
Adobe Flash Player 10 ActiveX (Version: 10.1.102.64)
Adobe Reader 8.1.5 (Version: 8.1.5)
Adobe® Photoshop® Album Starter Edition 3.2 (Version: 3.2.0)
AnswerWorks 4.0 Runtime - English (Version: 4.0.101)
AnswerWorks 5.0 English Runtime (Version: 008.000.0003)
AOLIcon (Version: 1.00.0000)
Apple Application Support (Version: 1.5.1)
Apple Mobile Device Support (Version: 3.4.0.25)
Apple Software Update (Version: 2.1.1.116)
ArcSoft Panorama Maker 3
ArcSoft Print Creations - Album Page
ArcSoft Print Creations - Funhouse
ArcSoft Print Creations - Greeting Card
ArcSoft Print Creations - Photo Book
ArcSoft Print Creations - Photo Calendar
ArcSoft Print Creations - Scrapbook
ArcSoft Print Creations - Slimline Card
ArcSoft Print Creations (Version: 2.8.255.384)
ArcSoft TotalMedia Backup & Record
Ask Toolbar (Version: 1.4.4.0)
ATI Control Panel (Version: 6.14.10.5160)
ATI Display Driver (Version: 8.162-050803a2-025672C-Dell)
AudibleManager (Version: 0.0.0.0)
Belkin 54g USB Network Adapter
Bonjour (Version: 2.0.5.0)
Brother MFL-Pro Suite (Version: 1.00.000)
CardRd81 (Version: 4.00.0000.0004)
CCScore (Version: 7.00.0000.0001)
CinepPlayer 30 Update
Conexant D850 56K V.9x DFVc Modem
Consumer Complete Care Services Agreement (Version: 1.11.0000)
Corel Photo Album 6 (Version: 6.33)
Coupon Printer for Windows (Version: 4.0)
CR2 (Version: 4.00.0000.0003)
Creative Removable Disk Manager
Creative System Information
DDXL
Dell CinePlayer (Version: 3.0)
Dell Digital Jukebox Driver
Dell Driver Reset Tool (Version: 1.02.0000)
Dell Game Console
Dell Media Experience (Version: 3.1)
Dell Support Center (Support Software) (Version: 2.2.09085)
Dell System Restore (Version: 2.00.0000)
DellSupport (Version: 6.0.3062)
Digital Content Portal (Version: 1.00.0000)
Digital Line Detect (Version: 1.10)
Documentation & Support Launcher (Version: 1.00.0000)
DVDVideoSoftTB Toolbar (Version: 6.3.3.3)
EarthLink setup files (Version: 2005.1.47.0)
EducateU (Version: 1.00.0000)
eEye Digital Security Blink (Version: 4.1.4.2012)
ELIcon (Version: 1.00.0000)
ESSBrwr (Version: 8.00.0000.0001)
ESSCDBK (Version: 8.00.0000.0001)
ESScore (Version: 8.00.0000.0001)
ESSgui (Version: 8.00.0000.0001)
ESSini (Version: 8.00.0000.0001)
ESSPCD (Version: 7.01.0000.0001)
ESSPDock (Version: 6.03.0001.0004)
ESSTOOLS (Version: 5.00.0000.0004)
essvatgt (Version: 8.00.0000.0001)
fflink (Version: 6.02.1001.0001)
Finale NotePad 2008 (Version: 13.0.0.0)
Free Audio CD Burner version 1.4.7
Free YouTube Download version 2.10.33.324
Games, Music, & Photos Launcher (Version: 1.00.0000)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.1.1920.1238)
Google Update Helper (Version: 1.3.21.65)
GoToAssist 8.0.0.514
High Definition Audio Driver Package - KB835221 (Version: 20040219.000000)
Homeschool Tracker Plus (Version: 6.1.7)
hp LaserJet 1000
ImageMixer3 (Version: 3.00.006)
Intel(R) PRO Network Connections Drivers
Intel(R) PROSet for Wired Connections (Version: 9.20.0000)
ItsDeductible Express (Version: 1.00.0000)
iTunes (Version: 10.2.2.12)
Java 2 Runtime Environment, SE v1.4.2_03 (Version: 1.4.2_03)
Java(TM) 6 Update 11 (Version: 6.0.110)
Java(TM) 6 Update 7 (Version: 1.6.0.70)
Java(TM) SE Runtime Environment 6 (Version: 1.6.0.0)
KB408682
Kodak EasyShare software
LaserJet 1020 series
LaserJet 1020 series Setup
Learn2 Player (Uninstall Only)
Malwarebytes' Anti-Malware version 1.51.1.1800 (Version: 1.51.1.1800)
MCU (Version: 1.00.0000)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1)
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft Office Basic Edition 2003 (Version: 11.0.7969.0)
Microsoft Plus! Digital Media Edition Installer (Version: 1.1.0.3514)
Microsoft Plus! Photo Story 2 LE (Version: 1.1.0.3463)
Microsoft User-Mode Driver Framework Feature Pack 1.9
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft WinUsb 1.0
MobileMe Control Panel (Version: 3.1.5.0)
Modem Helper (Version: 2.40)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (Version: 4.20.9818.0)
MSXML 6.0 Parser (KB933579) (Version: 6.10.1200.0)
Musicmatch for Windows Media Player (Version: 0.00.000)
Musicmatch® Jukebox (Version: 10.10.0097)
netbrdg (Version: 7.01.0000.0001)
NetWaiting (Version: 2.5.12)
Nikon Message Center (Version: 0.91.000)
OfotoXMI (Version: 7.02.0000.0001)
OverDrive Media Console (Version: 2.1.0)
PaperPort (Version: 9.02.0814)
PictureProject (Version: 1.0)
PictureProject In Touch Downloader 1.0 (Version: 1.0)
Polar Bowler (Version: 09/21/2005  06:04 PM)
Polar Golfer (Version: 09/20/2005  12:01 AM)
Qualxserve Service Agreement (Version: 1.11.0000)
QuickTime (Version: 7.69.80.9)
RealPlayer Basic
Rhapsody
Rhapsody Player Engine (Version: 1.0.604)
Rosetta Stone 2.1.2.0A (Version: 2.1.2.0)
Roxio DLA (Version: 5.2.0)
Roxio MyDVD LE (Version: 6.1.6)
Roxio RecordNow Audio (Version: 2.0.4)
Roxio RecordNow Copy (Version: 2.0.4)
Roxio RecordNow Data (Version: 2.0.4)
Safari (Version: 5.33.21.1)
Sansa Media Converter
SCRABBLE (Version: 09/20/2005  12:02 AM)
Search Assist (Version: 1.00.0000)
Secunia PSI (2.0.0.3003)
SFR (Version: 7.01.0000.0003)
SFR2 (Version: 3.03.0000.0002)
SHASTA (Version: 7.01.0000.0001)
Shopping List for Windows 95/98/00/ME/NT/XP
SigmaTel Audio (Version: 5.10.4600.0)
skin0001 (Version: 8.00.0000.0001)
SKINXSDK (Version: 7.01.0000.0001)
Sonic Activation Module (Version: 1.0)
Sonic Update Manager (Version: 3.0.0)
staticcr (Version: 8.00.0000.0001)
Student Management System
TurboTax 2008
TurboTax 2008 WinPerFedFormset (Version: 008.000.0341)
TurboTax 2008 WinPerProgramHelp (Version: 008.000.0219)
TurboTax 2008 WinPerReleaseEngine (Version: 008.000.0197)
TurboTax 2008 WinPerTaxSupport (Version: 008.000.1007)
TurboTax 2008 WinPerUserEducation (Version: 008.000.0433)
TurboTax 2008 wrapper (Version: 008.000.0065)
TurboTax 2008 wvaiper (Version: 008.000.0122)
TurboTax 2009
TurboTax 2009 WinPerFedFormset (Version: 009.000.2881)
TurboTax 2009 WinPerReleaseEngine (Version: 009.000.0328)
TurboTax 2009 WinPerTaxSupport (Version: 009.000.0245)
TurboTax 2009 wrapper (Version: 009.000.0145)
TurboTax 2009 wvaiper (Version: 009.000.0907)
TurboTax Deluxe 2004
TurboTax Deluxe 2007
TurboTax Deluxe Deduction Maximizer 2006
TurboTax ItsDeductible 2006 (Version: 10.00.0000)
Uninstall 1.0.0.1
Viewpoint Media Player
VPRINTOL (Version: 7.01.0000.0001)
WebCyberCoach 3.2 Dell
WebFldrs XP (Version: 9.50.7523)
WexTech AnswerWorks (Version: 1.00.000)
WildTangent Web Driver
Windows Genuine Advantage Notifications (KB905474) (Version: 1.7.0018.5)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0036.0)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Media Format 11 runtime
Windows Media Player 10 (Version: 9.00.3636)
Windows Media Player 10 Hotfix - KB895316
Windows Media Player 11
Windows Mobile Device Updater Component (Version: 04.07.1407.00)
Windows XP Service Pack 3 (Version: 20080414.031525)
WIRELESS (Version: 7.02.0000.0001)
WModem Driver Installer (Version: 2.0.6.7)
Zune (Version: 04.07.1404.01)
Zune Language Pack (DEU) (Version: 04.07.1404.01)
Zune Language Pack (ESP) (Version: 04.07.1404.01)
Zune Language Pack (FRA) (Version: 04.07.1404.01)
Zune Language Pack (ITA) (Version: 04.07.1404.01)
Zune Language Pack (NLD) (Version: 04.07.1404.01)
Zune Language Pack (PTB) (Version: 04.07.1404.01)
Zune Language Pack (PTG) (Version: 04.07.1404.01)

========================= Memory info: ===================================

Percentage of memory in use: 26%
Total physical RAM: 3070.07 MB
Available physical RAM: 2243.28 MB
Total Pagefile: 4955.96 MB
Available Pagefile: 4322.69 MB
Total Virtual: 2047.88 MB
Available Virtual: 1998.53 MB

========================= Partitions: =====================================

2 Drive c: () (Fixed) (Total:145.7 GB) (Free:5.39 GB) NTFS

========================= Users: ========================================

User accounts for \\DDPJ5HB1

Administrator            BLINK_DDPJ5HB1           Guest                    
HelpAssistant            Mark X             Melanie X          
SUPPORT_388945a0         


== End of log == 

MBAM log:

Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Database version: 7448

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

8/12/2011 5:15:12 PM
mbam-log-2011-08-12 (17-15-11).txt

Scan type: Full scan (A:\|C:\|D:\|)
Objects scanned: 368497
Time elapsed: 2 hour(s), 47 minute(s), 32 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

SAS log:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 08/12/2011 at 05:59 PM

Application Version : 5.0.1108

Core Rules Database Version : 7558
Trace Rules Database Version: 5370

Scan type : Quick Scan
Total Scan Time : 00:14:40

Operating System Information
Windows XP Home Edition 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned : 560
Memory threats detected : 0
Registry items scanned : 32127
Registry threats detected : 0
File items scanned : 13821
File threats detected : 795

Rogue.AntivirusStudio
C:\Documents and Settings\Mark X\LOCAL SETTINGS\TEMP\JDHELLWO3.EXE
C:\Documents and Settings\Mark X\LOCAL SETTINGS\TEMP\JKbleepFU.EXE
C:\Documents and Settings\Mark X\LOCAL SETTINGS\TEMP\DESTROYER.EXE
C:\Documents and Settings\Mark X\LOCAL SETTINGS\TEMP\COCKSUCKER.EXE
C:\Documents and Settings\Mark X\LOCAL SETTINGS\TEMP\COSOCK.EXE

Adware.Tracking Cookie
C:\Documents and Settings\Mark X\Cookies\mark_X@112.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@247realmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@247realmedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@247realmedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@3dclicktracker[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@a.clickme[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@a.intentmedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@a1.interclick[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@a1.interclick[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@a1.interclick[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@accounts.youtube[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.360yield[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.epochtimes[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.proxad[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.reklamport[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.reklamport[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.thehill[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.thehill[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.thehill[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.wsod[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.wsod[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.wsod[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.yieldmanager[10].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.yieldmanager[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.yieldmanager[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.yieldmanager[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.yieldmanager[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.yieldmanager[6].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.yieldmanager[7].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.yieldmanager[9].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.zanox[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad.zanox[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad1.adtitan[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad1.adtitan[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad1.adtitan[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad1.chefkoch[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad1.chefkoch[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ad2.adfarm1.adition[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adbrite[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adbrite[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adecn[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adecn[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adecn[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adfarm1.adition[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adform[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adinterax[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adinterax[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adinterax[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adinterax[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adjuggler[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adknowledge[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adlegend[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adlegend[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adlegend[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads-vrx.adbrite[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.addynamix[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.addynamix[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.addynamix[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.adk2[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.advancedmn[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.arlington.adqic[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.belointeractive[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.belointeractive[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.blog[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.bridgetrack[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.bridgetrack[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.bridgetrack[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.cnn[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.cnn[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.cnn[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.cpxadroit[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.cpxadroit[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.dailystar.com[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.environmentalleader[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.foodbuzz[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.foodbuzz[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.hideyourarms[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.intergi[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.intergi[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.lzjl[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.lzjl[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.mail[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.mail[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.monster[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.monster[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.netrition[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.nj[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.ookla[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.pointroll[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.pointroll[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.pointroll[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.pointroll[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.pubmatic[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.pubmatic[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.pubmatic[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.raasnet[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.react2media[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.shorttail[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.shorttail[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.telegraph.co[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.telegraph.co[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.telegraph.co[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.thesmokinggun[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.thesmokinggun[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.thesmokinggun[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.townhall[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.townhall[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.undertone[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.undertone[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.undertone[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.undertone[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.us.e-planning[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.veoh[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.vidsense[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.webkinz[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.webkinz[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.webkinz[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ads.xgraph[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserv.nscdn[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserv.rotator.hadj7.adjuggler[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserver.adreactor[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserver.adreactor[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserver.adtechus[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserver.adtechus[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserver.adtechus[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserver.adtechus[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserver.gunaxin[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserver.sevenload[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserver.sevenload[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserver.twitpic[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserver.veruta[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adserving.versaneeds[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adtech[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adtech[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adtech[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adtrackrs[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adultfriendfinder[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adultswim[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@advertising[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@advertising[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@advertising[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@advertising[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@advertnation[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adverts.dublinevents[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adxpose[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adxpose[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@adxpose[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@aei.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@aei.122.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@aim4media[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@allbritton.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@allbritton.122.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@allbritton.122.2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@amex-insights[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@amex-insights[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@amtk-media[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@amtk-media[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@andomedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@andomedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@apmebf[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@apmebf[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@apmebf[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ar.atwola[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@associatedcontent.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@at.atwola[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@at.atwola[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@at.atwola[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atdmt.combing[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atdmt.combing[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atdmt.combing[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atdmt.combing[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atdmt.combing[6].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atdmt[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atdmt[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atdmt[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atdmt[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atdmt[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atlanticmedia.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atlanticmedia.122.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@atlanticmedia.122.2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@audit.median[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bangor.rotator.hadj1.adjuggler[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@banner.adchemy[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@banner.adchemy[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@banners.andomedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@banners.andomedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@banners.andomedia[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@beacon.dmsinsights[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@beiersdorf.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@beta-ads.ace.advertising[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bizrate[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bizrate[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bizrate[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bmwmoter.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bonniercorp.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bonniercorp.122.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bonniercorp.122.2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@borders.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bravenet[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bravenet[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@brownshoe.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bs.serving-sys[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bs.serving-sys[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bs.serving-sys[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bs.serving-sys[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@bs.serving-sys[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@buildabear.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@burstbeacon[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@burstbeacon[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@burstbeacon[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@burstnet[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@burstnet[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@burstnet[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@burstnet[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@c.gigcount[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@c.gigcount[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@c.gigcount[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@carlson.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@casalemedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@casalemedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@casalemedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@cbsdigitalmedia.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@cbsdigitalmedia.112.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@cbsdigitalmedia.112.2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@cdn1.trafficmp[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@cdn1.trafficmp[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@cdn1.trafficmp[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@cdn1.trafficmp[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@chicagosuntimes.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@chitika[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@chitika[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@citi.bridgetrack[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@citi.bridgetrack[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@citi.bridgetrack[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@click.friendsoftheuschamber[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@clickbank[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@clickbooth[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@clickfuse[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@clickfuse[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@clickorlando[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@clickorlando[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@clicksor[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@clicksor[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@cmn.adbureau[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@cn.clickable[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@collective-media[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@collective-media[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@collector.thermstats[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@condenast.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@content.yieldmanager[11].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@content.yieldmanager[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@content.yieldmanager[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@content.yieldmanager[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@content.yieldmanager[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@content.yieldmanager[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@content.yieldmanager[6].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@content.yieldmanager[7].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@content.yieldmanager[8].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@content.yieldmanager[9].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@converse.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@count.brat-online[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@counter.hitslink[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@counters.gigya[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@countryinns[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@countrystorecatalog[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@creative.vip-advertising[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@csc.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@csm.rotator.hadj7.adjuggler[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@csm.rotator.hadj7.adjuggler[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@csm.rotator.hadj7.adjuggler[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@d.jambomedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@d.mediaforge[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@d.mediaforge[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@d.mediaforge[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@data.coremetrics[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@data.coremetrics[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@data.coremetrics[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@dc.tremormedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@dc.tremormedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@dc.tremormedia[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@dc.tremormedia[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@dealtime[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@discount.perfectpitch[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@dmtracker[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@dmtracker[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@dmtracker[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@donerus.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@doubleclick[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@doubleclick[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@e-2dj6wfkyoldpwdo.stats.esomniture[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@e-2dj6whk4ckcjsbq.stats.esomniture[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@e-2dj6wjkyqmdjekq.stats.esomniture[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@e-2dj6wjnyakazidp.stats.esomniture[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@e2itg.pbteen[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@eaeacom.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@eas.apm.emediate[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@eas.apm.emediate[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@eas.apm.emediate[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@edge.ru4[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@edge.ru4[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@edgeadx[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@edgeadx[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@edgeadx[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@eharmony.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ehg-newscientist.hitbox[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ehg-verizon.hitbox[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ehg-verizon.hitbox[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ehg-verizon.hitbox[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@emediatrack[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@enhance[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ero-advertising[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ero-advertising[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@euros4click[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@eventbrite.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@evite.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@evite.112.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@evite.112.2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@eyewonder[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@eyewonder[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@eyewonder[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ez-tracks[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@fairfaxcounty[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@fairfaxcounty[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@fairfaxcounty[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@fastclick[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@fastclick[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@fastclick[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@fedex.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@fim.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@find.myrecipes[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@find.myrecipes[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@fl01.ct2.comclick[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@foxinteractivemedia.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@foxinteractivemedia.122.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@foxinteractivemedia.122.2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@friendfinder[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ghirardelli.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ghirardelli.112.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@googleads.g.doubleclick[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@googleads.g.doubleclick[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@googleads.g.doubleclick[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@gotacha.rotator.hadj7.adjuggler[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@gotacha.rotator.hadj7.adjuggler[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@gotacha.rotator.hadj7.adjuggler[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@gotacha.rotator.hadj7.adjuggler[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@gotacha.rotator.hadj7.adjuggler[6].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@hearstmagazines.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@hearstmagazines.112.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@highbeam.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@himedia.individuad[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@hitbox[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@hitbox[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@hitbox[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@hpi.rotator.hadj7.adjuggler[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@hpi.rotator.hadj7.adjuggler[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ice.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@imrworldwide[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@imrworldwide[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@imrworldwide[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@in.getclicky[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@in.getclicky[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@in.getclicky[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@insightexpressai[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@insightexpressai[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@insightexpressai[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@interclick[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@interclick[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@interclick[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@interclick[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@interclick[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@interclick[6].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@intermundomedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@intermundomedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@invitemedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@invitemedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@invitemedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@invitemedia[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@invitemedia[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ipcmedia.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@jibjab.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@jibjab.112.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@jibjab.112.2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@jmp.clickbooth[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@jra.advertserve[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@kantarmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@kantarmedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@kantarmedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@kingdigital.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@kitaramedia.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@kontera[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@kontera[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@laws.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@leeenterprises.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@leeenterprises.112.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@legolas-media[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@legolas-media[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@legolas-media[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@lfstmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@lfstmedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@lfstmedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@limaconsulting.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@linksynergy[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@liveperson[10].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@liveperson[11].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@liveperson[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@liveperson[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@liveperson[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@liveperson[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@liveperson[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@liveperson[6].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@liveperson[7].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@liveperson[8].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@liveperson[9].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@login.tracking101[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@lstat.youku[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@lucidmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@lucidmedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@lucidmedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@lucidmedia[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@lucidmedia[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@lucidmedia[6].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@lucidmedia[7].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@lyricfind.rotator.hadj7.adjuggler[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@marketlive.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@marketlive.122.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@marriottinternational.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@martiniadnetwork[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@maxvelocitytrack[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@media.adfrontiers[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@media.adfrontiers[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@media.adfrontiers[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@media.mtvnservices[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@media.photobucket[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@media.www.vainformer[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@media2.legacy[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@media6degrees[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@media6degrees[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@media6degrees[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@media6degrees[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediabistro[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediabrandsww[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediabrandsww[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediaforge[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediaforge[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediaforge[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediaite[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediaite[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediaite[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediamatters[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediaplex[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediaplex[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mediaplex[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@microsoftwindows.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@microsoftwlcashback.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mlbam.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mm.chitika[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@modcloth.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@msnbc.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@msnbc.112.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@msnbc.112.2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@msnportal.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@msnportal.112.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@mtvn.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@myaccount.verizonwireless[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@myroitracking[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@myroitracking[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@netcentral.advertserve[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@network.realmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@network.realmedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@networldmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@newsomscountryham[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@newsquestdigitalmedia.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@nextag[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@nextag[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@oasc09.247realmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@oasc10.247realmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@oasc10.247realmedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@oasn04.247realmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@onetoone.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@optimize.indieclick[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@optimize.indieclick[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@overture[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@overture[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@overture[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ox.mediabistro[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@p09tclicks[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pajamasmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pajamasmedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pajamasmedia[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@paypal.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@paypal.112.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pbteen.tt.omtrdc[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pbteen[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pbteen[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pearson.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pluckit.demandmedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pluckit.demandmedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pointroll[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pointroll[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pointroll[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pro-market[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pro-market[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pro-market[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@profiles.hitslink[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pubads.g.doubleclick[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@pubads.g.doubleclick[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@questionmarket[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@questionmarket[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@questionmarket[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@questionmarket[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@questionmarket[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@r.unicornmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@r1-ads.ace.advertising[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@r1-ads.ace.advertising[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@r2.unicornmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@realmedianetwork[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@realmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@realmedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@realmedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@realmedia[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@revenue[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@revenue[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@revsci[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@revsci[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@revsci[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@revsci[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@revsci[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@revsci[6].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@richmedia.yahoo[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@richmedia.yahoo[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@richmedia.yahoo[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@richmedia.yahoo[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@rm.yieldmanager[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@roiservice[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@rotator.adjuggler[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@rotator.hadj7.adjuggler[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@rotator.hadj7.adjuggler[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@rtst.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ru4[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ru4[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ru4[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@s.clickability[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@s.clickability[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@s.clickability[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@saic.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@saic.122.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@saic.122.2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@sales.liveperson[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@sales.liveperson[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@sales.liveperson[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@sales.liveperson[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@secure.pbteen[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@server.cpmstar[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@server.cpmstar[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@server.cpmstar[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@server.iad.liveperson[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@server.iad.liveperson[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@server.iad.liveperson[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@serving-sys[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@serving-sys[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@serving-sys[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@serving-sys[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@seventeen[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@siemens.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@sixflags.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@smokinggun.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@smokinggun.122.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@smokinggun.122.2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@solvemedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@solvemedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@solvemedia[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@specificclick[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@specificclick[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@specificclick[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@specificclick[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@specificmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@specificmedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@specificmedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@specificmedia[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stat.dealtime[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stat.onestat[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stat.onestat[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stat.onestat[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@statcounter[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@statcounter[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@statcounter[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stats.crayola[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stats.crayola[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stats.dailystar.com[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stats.paypal[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stats.paypal[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stats.townnews[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stats.townnews[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stats.townnews[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@statse.webtrendslive[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@statse.webtrendslive[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@statse.webtrendslive[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@steelhousemedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@steelhousemedia[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@steelhousemedia[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@stocks.advertserve[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@surveyfindweb[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@t.pointroll[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tacoda.at.atwola[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tacoda.at.atwola[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tacoda.at.atwola[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tacoda[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tacoda[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@target.db.advertising[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@target.db.advertising[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@target.db.advertising[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@telefloracom.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tequila.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@test.ads.pointroll[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@test.coremetrics[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@testdata.coremetrics[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@theadvertiser[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@thefind[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@thinkgeek.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@timeinc.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@timeinc.122.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tjx.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tjx.112.2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@toplist[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@total-media[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@total-media[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@total-media[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@track.adform[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tracking.foxnews[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tracking.foxnews[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tracking.foxnews[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tracking.onefeed.co[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tracking.williamsburgmarketplace[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@trackmill[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@trackmill[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@trackmill[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tradedoubler[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tradedoubler[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tradedoubler[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@traffic.prod.cobaltgroup[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@trafficking.nabbr[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@trafficmp[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@trafficmp[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@trafficmp[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@trafficmp[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@trafficmp[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@traveladvertising[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@traveladvertising[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@traveladvertising[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tribalfusion[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tribalfusion[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tribalfusion[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tribalfusion[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@trinitymirror.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@tripod[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@usairways.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@usatoday1.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@usatoday1.112.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@usatoday1.112.2o7[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@ussearch.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@veomedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@viacom.adbureau[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@viacom.adbureau[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@viacom.adbureau[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@videoegg.adbureau[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@videos.mediaite[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@videos.mediaite[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@virginiatraditions[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@vitacost.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@vpmc.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@w00tpublishers.wootmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@walmart.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@walmart.112.2o7[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@walmart.112.2o7[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@web4.realtracker[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@webmasterplan[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@websitebiz.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@webstats.aetna[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@webstats.aetna[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@wegmansfoods.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@wpni.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.3dstats[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.burstbeacon[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.burstbeacon[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.burstbeacon[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.burstnet[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.burstnet[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.burstnet[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.clickorlando[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.clickorlando[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.countrystorecatalog[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.countrystorecatalog[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.etracker[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.ez-tracks[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.googleadservices[10].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.googleadservices[11].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.googleadservices[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.googleadservices[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.googleadservices[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.googleadservices[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.googleadservices[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.googleadservices[6].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.googleadservices[7].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.googleadservices[8].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.googleadservices[9].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.insightexpress[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.mediabistro[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.mediaite[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.mediaite[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.mediaite[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.pbteen[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.pixeltrack66[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.pixeltrack66[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www.seventeen[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www3.addfreestats[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www3.addfreestats[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www6.addfreestats[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www9.addfreestats[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www9.addfreestats[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@www9.addfreestats[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@xiti[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@xiti[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@xm.xtendmedia[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@yadro[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@yadro[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@yadro[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@yahoogroups.112.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@yamaha.com.122.2o7[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@yieldmanager[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@yieldmanager[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@z.blogads[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@z.blogads[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@z.blogads[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@zanox[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@zedo[1].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@zedo[2].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@zedo[3].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@zedo[4].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@zedo[5].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@zedo[6].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@zedo[8].txt
C:\Documents and Settings\Mark X\Cookies\mark_X@zwinky.stats.differencis[1].txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAQ8VE7U.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CANDC3EN.txt
C:\Documents and Settings\Mark X\Cookies\mark_X@us.sitestat[4].txt
C:\Documents and Settings\Mark X\Cookies\3ZYM3RHL.txt
C:\Documents and Settings\Mark X\Cookies\YVRA7O85.txt
C:\Documents and Settings\Mark X\Cookies\07UJ2W7D.txt
C:\Documents and Settings\Mark X\Cookies\YSL2SNJY.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAPDACIG.txt
C:\Documents and Settings\Mark X\Cookies\VNGZQESY.txt
C:\Documents and Settings\Mark X\Cookies\XPQ44E5M.txt
C:\Documents and Settings\Mark X\Cookies\5XOOZGPY.txt
C:\Documents and Settings\Mark X\Cookies\0Q7V26U6.txt
C:\Documents and Settings\Mark X\Cookies\NMVCWS90.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CA3NVU08.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CA4U5JMO.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CA9XDPSI.txt
C:\Documents and Settings\Mark X\Cookies\mark_X@us.sitestat[5].txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAECPFGS.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAMPNWSD.txt
C:\Documents and Settings\Mark X\Cookies\8MOS1OC3.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAEDC65V.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CA4IUTWN.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAMTNSX5.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAU8W9YY.txt
C:\Documents and Settings\Mark X\Cookies\mark_X@estat[2].txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAUWXESR.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAOX0KG2.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAOSYTDA.txt
C:\Documents and Settings\Mark X\Cookies\F7EVZWWB.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAKMWD11.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CANMWGEJ.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAYWZMFC.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CAC2UQ9G.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CA1D01Z4.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CADBQZDE.txt
C:\Documents and Settings\Mark X\Cookies\mark X@CANQ6Q3N.txt

Trojan.Agent/Gen-Fake[MSYuv]
C:\WINDOWS\MSYUV.DLL

Adware.CouponBar
C:\WINDOWS\SYSTEM32\CPNPRT2.CID

Trojan.Agent/Gen-Frauder[MSFat]
C:\DOCUMENTS AND SETTINGS\MARK X\LOCAL SETTINGS\TEMP\1C.TMP
C:\DOCUMENTS AND SETTINGS\MARK X\LOCAL SETTINGS\TEMP\9E.TMP

Trojan.Agent/Gen-FraudLoad
C:\DOCUMENTS AND SETTINGS\MARK X\LOCAL SETTINGS\TEMP\63.TMP
C:\DOCUMENTS AND SETTINGS\MARK X\LOCAL SETTINGS\TEMP\DF.TMP

Trojan.Agent/Gen-FakeSecurity
C:\DOCUMENTS AND SETTINGS\MARK X\LOCAL SETTINGS\TEMP\JAR_CACHE130868242252465972.TMP
C:\DOCUMENTS AND SETTINGS\MARK X\LOCAL SETTINGS\TEMP\JAR_CACHE8916787584486759509.TMP
C:\DOCUMENTS AND SETTINGS\MARK X\DESKTOP\0.7257087115308821.EXE

#10 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,985 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:07:27 PM

Posted 14 August 2011 - 12:55 PM

However - on my desktop, and in "All Programs", there is STILL the icon for Windows XP Fix!

Open My Computer and double click on your windows partition (usually c:\). Double click on Documents and settings, then on your Useprofile folder.
Double click the Desktop folder and see if you can see the Windows XP fix file there. If so, delete it.
For All Programs, double click in your userprofile folder on the Start Menu folder, and look under Programs.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#11 LadyLuddite

LadyLuddite
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 14 August 2011 - 02:10 PM

Hi Elise - I deleted the icon in the Desktop folder. I do see it also under Programs in the Start Menu folder - should I just right-click and delete it from there as well? Thanks.

#12 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,985 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:07:27 PM

Posted 14 August 2011 - 03:00 PM

Yes, you can delete it there as well.

Do you have any other problem left?

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#13 LadyLuddite

LadyLuddite
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 14 August 2011 - 03:37 PM

I deleted it from that Programs folder, and I believe it is now gone from everywhere on my computer! Thanks so much, Elise, to you and to Jason too. I really appreciate your help.

All the best,

LadyLuddite

#14 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,985 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:07:27 PM

Posted 14 August 2011 - 03:54 PM

Hi, lets also do a few last steps. :)

Your version of Adobe Reader is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system. Please follow these steps to remove older version Adobe components and update:
  • Download the latest version of Adobe Reader Version X. and save it to your desktop.
  • Uncheck the "Free McAfee Security plan Plus" option or any other Toolbar you are offered
  • Click the download button at the bottom.
  • If you use Internet Explorer and do not wish to install the ActiveX element, simply click on the click here to download link on the next page.
  • Remove all older version of Adobe Reader: Go to Add/remove and uninstall all versions of Adobe Reader, Acrobat Reader and Adobe Acrobat.
    If you are unsure of how to use Add or Remove Programs, the please see this tutorial:How To Remove An Installed Program From Your Computer
  • Then from your desktop double-click on Adobe Reader to install the newest version.
    If using Windows Vista and the installer refuses to launch due to insufficient user permissions, then Run As Administrator.
  • When the "Adobe Setup - Welcome" window opens, click the Install > button.
  • If offered to install a Toolbar, just uncheck the box before continuing unless you want it.
Your Adobe Reader is now up to date!


Your version of Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system.
  • Download the latest version of Java Runtime Environment (JRE) Version 7.
  • Look for "JDK 7 (JDK or JRE).
  • Click the "Download JRE" button at the right.
  • Read the License Agreement, and then check the box that says: "Accept License Agreement".
    • Select "Windows x86 Offline" and click on jre-7-windows-i586.exe
  • Save it to your desktop
  • Close any programs you may have running - especially your web browser.
  • Uninstall all older versions of Java (any item with Java Runtime Environment, JRE or J2SE in the name).
  • Reboot your computer once all Java components are removed.
  • Install the newest version by double clicking (run as Administrator for Windows Vista/Seven) the downloaded file.


ESET ONLINE SCANNER
----------------------------
I'd like us to scan your machine with ESET OnlineScan
  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image
      icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft


#15 LadyLuddite

LadyLuddite
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:11:27 AM

Posted 14 August 2011 - 09:59 PM

Hi Elise - I updated/deleted Adobe and Java as you recommended, and ran the ESET scan - phew, 4.5 hours. Here's the log:

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\0P70QJCZ\C0[1].php a variant of Java/TrojanDownloader.OpenStream.NAZ trojan deleted - quarantined
C:\Documents and Settings\Mark X\Application Data\Sun\Java\Deployment\cache\6.0\13\23f2248d-547764b1 multiple threats deleted - quarantined
C:\Documents and Settings\Mark X\Application Data\Sun\Java\Deployment\cache\6.0\16\70675d0-49f1fe6c multiple threats deleted - quarantined
C:\Documents and Settings\Mark X\Application Data\Sun\Java\Deployment\cache\6.0\18\9bceb52-79dc9944 multiple threats deleted - quarantined
C:\Documents and Settings\Mark X\Application Data\Sun\Java\Deployment\cache\6.0\38\1d7766-6aead7d8 multiple threats deleted - quarantined
C:\Documents and Settings\Mark X\Local Settings\Temp\0.5716241937405855.swf a variant of Win32/TrojanDownloader.Monkif.AO trojan cleaned by deleting - quarantined
C:\Documents and Settings\Mark X\Local Settings\Temp\0.7162359958104629.swf a variant of Win32/TrojanDownloader.Monkif.AO trojan cleaned by deleting - quarantined
C:\Documents and Settings\Mark X\Local Settings\Temp\0.9168727648916699.swf a variant of Win32/TrojanDownloader.Monkif.AO trojan cleaned by deleting - quarantined
C:\Documents and Settings\Mark X\Local Settings\Temp\jar_cache7630445803977095818.tmp multiple threats deleted - quarantined
C:\Documents and Settings\Mark X\Local Settings\Temp\is-5CVJB.tmp\OCSetupHlp.dll Win32/OpenCandy application cleaned by deleting - quarantined
C:\Documents and Settings\Mark X\Local Settings\Temp\is-K56MU.tmp\OCSetupHlp.dll Win32/OpenCandy application cleaned by deleting - quarantined
C:\Documents and Settings\Mark X\Local Settings\Temp\is-PHM0L.tmp\OCSetupHlp.dll Win32/OpenCandy application cleaned by deleting - quarantined
C:\Documents and Settings\Mark X\Local Settings\Temp\is-PUJIU.tmp\OCSetupHlp.dll Win32/OpenCandy application cleaned by deleting - quarantined
C:\Documents and Settings\Mark X\Local Settings\Temp\is-VPBR5.tmp\OCSetupHlp.dll Win32/OpenCandy application cleaned by deleting - quarantined
C:\Program Files\DVDVideoSoft\Free YouTube to Mp3 Converter\OpenCandy\OCSetupHlp.dll Win32/OpenCandy application cleaned by deleting - quarantined
C:\Program Files\eEye Digital Security\Blink\blinkrm.exe probably unknown NewHeur_PE virus deleted (after the next restart) - quarantined




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users