Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

HELP: unknown Windows XP infection


  • Please log in to reply
14 replies to this topic

#1 blackwellbert

blackwellbert

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:08 PM

Posted 04 December 2011 - 10:02 PM

My Windows XP machine is so badly infected that I cannot defog or run DDS. What do I do now?

BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,416 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:08 PM

Posted 08 December 2011 - 04:31 PM

Hello and welcome.. Lets see if we can do these.

Please click Start > Run, type inetcpl.cpl in the runbox and press enter.
Click the Connections tab and click the LAN settings option.
Verify if "Use a proxy..." is checked, if so, UNcheck it and click OK/OK to exit.


Reboot into Safe Mode with Networking
How to enter safe mode(XP/Vista)
Using the F8 Method
Restart your computer.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode with Networking using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode
.


>>>> Download this file and doubleclick on it to run it. Allow the information to be merged with the registry.


Run RKill....


Download and Run RKill
  • Please download RKill by Grinler from one of the 4 links below and save it to your desktop.

    Link 1
    Link 2
    Link 3
    Link 4

  • Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as malicious. Please refer to this page if you are not sure how.
  • Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)
  • A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed.
  • If nothing happens or if the tool does not run, please let me know in your next reply

Do not reboot your computer after running rkill as the malware programs will start again. Or if rebooting is required run it again.


If you continue having problems running rkill.com, you can download iExplore.exe or eXplorer.exe, which are renamed copies of rkill.com, and try them instead.



Next run Superantisypware (SAS):

Download and scan with SUPERAntiSpyware Free for Home Users
  • Double-click SUPERAntiSpyware.exe and use the default settings for installation.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the Scanning Control tab.
  • Under Scanner Options make sure the following are checked (leave all others unchecked):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.
  • Click the "Close" button to leave the control center screen.
  • Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive.
  • On the right, under "Complete Scan", choose Perform Complete Scan.
  • Click "Next" to start the scan. Please be patient while it scans your computer.
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes".
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.
  • Click Close to exit the program.
If you have a problem downloading, installing or getting SAS to run, try downloading and using the SUPERAntiSpyware Portable Scanner instead. Save the randomly named file (i.e. SAS_1710895.COM) to a usb drive or CD and transfer to the infected computer. Then double-click on it to launch and scan. The file is randomly named to help keep malware from blocking the scanner.


Now reboot to Normal and run MBAM (MalwareBytes):

Please download Malwarebytes Anti-Malware and save it to your desktop.
Download Link 1
Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
    For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
  • Exit MBAM when done.
Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

Troubleshoot Malwarebytes' Anti-Malware

Please ask any needed questions,post logs and Let us know how the PC is running now.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 blackwellbert

blackwellbert
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:08 PM

Posted 08 December 2011 - 04:33 PM

I am getting a lot of pop-ups and my Program Files folder is not avaiable. My All Programs is showing as <empty>. None of my anti-virus software will run and defogger and dds won't run so I can't get those logs. Also I could not config. msconfig to boot into Safemode. I have not tried using F8 to boot to safemode. This is all I can tell you.

#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,416 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:08 PM

Posted 08 December 2011 - 04:55 PM

Ouch, that wan't a good idea Please do never attempt to start safe mode using msconfig!!


Please boot in safe mode and see if you can change msconfig back.

If not, locate the following file: c:\windows\pss\boot.ini.backup

Copy that file to c:\

Rename the existing boot.ini to boot.ini.old

Rename boot.ini.backup to boot.ini




This should help you see the files.

Please download the following program to your desktop:

Unhide.exe

Once the program has been downloaded, double-click on the Unhide.exe icon on your desktop and allow the program to run. This program will remove the +H, or hidden, attribute from all the files on your hard drives. If there are any files that were purposely hidden by you, you will need to hide them again after this tool is run.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 blackwellbert

blackwellbert
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:08 PM

Posted 10 December 2011 - 11:25 AM

I have a lot to report about my computer. First I ran fix.exe and it worked. Rkill and it aliases executed, but an "access denied" message appeared. I ran SAS and 1461 pieces of malware were removed. I tried MBAM, but could not update even though my network connection works. Internet is still being blocked. I ran ESET Online scanner and detected and removed about another 28 "viruses". I ran MBAM (not updated) in safemode and removed about 26 "viruses". After removing all these, I rebooted into safemode and tried running rkill again, but again I got the access denied message. I ran "unhide" and now folders in C: drive are visible, but in All Programs, many installed programs are still showing as empty. I was able to run run defogger and DDS. When I was installing MBAM, I got this error message: "Run-time error 53: file not found: mbamnet . . . access denied. Also, I kept getting a Dial-up Connection box, and I would close it an it would keep coming back. At normal startup I would get a Search Helper settings box pop-up. Also, during SAS scan I got a iexplorer message: "drive letter access components add on version 1.0.0.1 published by (not verified) Sonic solutions is not compatible with IE 8. When I x'ed out, I got an open browser (http://go.microsft.com/fwlink/?LinkId=124996), then that went away then the above message kept coming back. This cycle continued while SAS was scanning. I could never get MBAM or SAS to run in normal mode. I forgot that I was finally able to run rkill but it showed nothing terminated.

All scans below. Thanks for your help!

I had to delete my SAS log because I got a message saying my reply was too long! I will try attaching it or with a separate reply.


C:\Documents and Settings\admin\Application Data\Mozilla\Firefox\Profiles\efv2aifh.default\extensions\{d8116b56-6a9f-4f71-be17-77f131e2f9a1}\chrome.manifest Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\k04fmq41.default\extensions\{d8116b56-6a9f-4f71-be17-77f131e2f9a1}\chrome.manifest Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\Documents and Settings\Colin\Application Data\Mozilla\Firefox\Profiles\zjnpbt67.default\extensions\{d8116b56-6a9f-4f71-be17-77f131e2f9a1}\chrome.manifest Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\Documents and Settings\Colin\Local Settings\Application Data\Google\Chrome\User Data\Default\Default\iokkoficgllmfjopkflkgchbjbpaclei\contentscript.js Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\Documents and Settings\Erika\Application Data\Mozilla\Firefox\Profiles\yi7tk6v8.default\extensions\{d8116b56-6a9f-4f71-be17-77f131e2f9a1}\chrome.manifest Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\Documents and Settings\Erika\Local Settings\temp\freezefrogsa.exe multiple threats deleted - quarantined
C:\Documents and Settings\Erika\Local Settings\temp\FREEzeFrogUpgrade.exe multiple threats deleted - quarantined
C:\Documents and Settings\Erika\My Documents\Downloads\setup.exe a variant of Win32/Adware.HotBar.H application cleaned by deleting - quarantined
C:\Documents and Settings\Erika\My Documents\Downloads\XvidSetup(2).exe a variant of Win32/Adware.HotBar.H application cleaned by deleting - quarantined
C:\Documents and Settings\Erika\My Documents\Downloads\XvidSetup(3).exe a variant of Win32/Adware.HotBar.H application cleaned by deleting - quarantined
C:\Documents and Settings\Erika\My Documents\Downloads\XvidSetup.exe a variant of Win32/Adware.HotBar.H application cleaned by deleting - quarantined
C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\nlxmivl5.default\extensions\{d8116b56-6a9f-4f71-be17-77f131e2f9a1}\chrome.manifest Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\s0nfn3md.default\extensions\{d8116b56-6a9f-4f71-be17-77f131e2f9a1}\chrome.manifest Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\Program Files\FREEzeFrog\bin\2.0.13.0\FREEzeFrogSA.exe probably a variant of Win32/Adware.180Solutions application cleaned by deleting - quarantined
C:\Program Files\FREEzeFrog\bin\2.0.13.0\FREEzeFrogUninstaller.exe a variant of Win32/Adware.HotBar.E application deleted - quarantined
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\Documents and Settings\Administrator\Local Settings\Application Data\{150402CB-8E17-45A2-8E91-D2C7DA74A105}\chrome\content\overlay.xul.vir probably a variant of Win32/Agent.NVQFFQI trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000062.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000144.manifest Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000145.manifest Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000146.manifest Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000147.manifest Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000148.manifest Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000149.manifest Win32/TrojanDownloader.Tracur.F trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000150.exe probably a variant of Win32/Adware.180Solutions application cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000151.exe a variant of Win32/Adware.HotBar.E application deleted - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000152.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined
C:\_OTL\MovedFiles\04162010_235216\C_WINDOWS\system32\config\systemprofile\Local Settings\Application Data\{2DA5FA4D-7938-4EAA-89C2-5F2F819D487E}\chrome\content\overlay.xul probably a variant of Win32/Agent.NVQFFQI trojan cleaned by deleting - quarantined


Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 7622

Windows 5.1.2600 Service Pack 3 (Safe Mode)
Internet Explorer 8.0.6001.18702

12/10/2011 7:34:33 AM
mbam-log-2011-12-10 (07-34-33).txt

Scan type: Full scan (C:\|)
Objects scanned: 428719
Time elapsed: 46 minute(s), 39 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 13
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 4
Files Infected: 17

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{D9291F9E-7010-4D7A-8DF6-455DEEF8EF51} (PUP.LivingPlay) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1602F07D-8BF3-4c08-BDD6-DDDB1C48AEDC} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-CD68-4f36-8D02-8C43722EE5DA} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AC6D819E-AA8F-4418-A3BB-D165C1B18BB5} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MouseDriver (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FREEzeFrogAx.Info (Adware.FreezeFrog) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FREEzeFrogAx.Info.1 (Adware.FreezeFrog) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\FREEZEFROGSA (Adware.FreezeFrog) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\tgs90gv74r (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FREEzeFrogSA (Adware.FreezeFrog) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\Software\freezefrogsa\actionurl_current_version (Adware.FreezeFrog) -> Value: actionurl_current_version -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MouseDriver\ImagePath (Trojan.Agent) -> Value: ImagePath -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
c:\documents and settings\all users\application data\2aca5cc3-0f83-453d-a079-1076fe1a8b65 (Adware.Seekmo) -> Quarantined and deleted successfully.
c:\documents and settings\bon qui qui\start menu\Programs\antimalware doctor (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\freezefrogsa (Adware.FreezeFrog) -> Quarantined and deleted successfully.
c:\program files\freezefrog\bin\2.0.13.0 (Adware.FreezeFrog) -> Quarantined and deleted successfully.

Files Infected:
c:\RECYCLER\s-1-5-21-303941951-797862188-4109352829-1010\Dc14.exe (PUP.Dropper.Gen) -> Quarantined and deleted successfully.
c:\RECYCLER\s-1-5-21-303941951-797862188-4109352829-1011\Dc33.exe (PUP.Dropper.Gen) -> Quarantined and deleted successfully.
c:\system volume information\_restore{129201fa-b0ac-49b3-96b2-deb8b91e727b}\RP0\A0000069.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\system volume information\_restore{129201fa-b0ac-49b3-96b2-deb8b91e727b}\RP0\A0000070.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\documents and settings\bon qui qui\application data\microsoft\internet explorer\quick launch\antimalware doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully.
c:\documents and settings\bon qui qui\start menu\antimalware doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully.
c:\documents and settings\admin\application data\mousedriver.bat (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\bon qui qui\start menu\Programs\antimalware doctor\antimalware doctor.lnk (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.
c:\documents and settings\bon qui qui\start menu\Programs\antimalware doctor\uninstall.lnk (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\freezefrogsa\freezefrogsa.dat (Adware.FreezeFrog) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\freezefrogsa\freezefrogsaabout.mht (Adware.FreezeFrog) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\freezefrogsa\freezefrogsaau.dat (Adware.FreezeFrog) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\freezefrogsa\freezefrogsaeula.mht (Adware.FreezeFrog) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\freezefrogsa\freezefrogsa_kyf.dat (Adware.FreezeFrog) -> Quarantined and deleted successfully.
c:\program files\freezefrog\bin\2.0.13.0\copyright.txt (Adware.FreezeFrog) -> Quarantined and deleted successfully.
c:\program files\freezefrog\bin\2.0.13.0\freezefrogsacb.exe (Adware.FreezeFrog) -> Quarantined and deleted successfully.
c:\program files\freezefrog\bin\2.0.13.0\freezefrogsahook.dll (Adware.FreezeFrog) -> Quarantined and deleted successfully.


.
DDS (Ver_2011-08-26.01) - NTFSx86 NETWORK
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Run by admin at 20:35:52 on 2011-12-09
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.768 [GMT -6:00]
.
AV: AVG Anti-Virus Free *Enabled/Outdated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\ping.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.dell.com
uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
mURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: {0170ac5f-dc99-1c34-8838-3e2c4cef3e39} - No File
BHO: freevideomaster Toolbar: {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - c:\program files\freevideomaster\tbfre0.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: {14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6} - No File
BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - c:\program files\divx\divx plus web player\ie\divxhtml5\DivXHTML5.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\DLASHX_W.DLL
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: PriceGongCtrl Class: {d2a2595c-4fe4-4315-aa9b-19dbd6271b71} - c:\program files\pricegong\1.5.0\PriceGongIE.dll
BHO: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: {e5c45e76-508b-462a-b8a1-97db5b4c87ec} - No File
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: freevideomaster Toolbar: {01dfd24d-73eb-497f-8dfd-7ea79365af4a} - c:\program files\freevideomaster\tbfre0.dll
TB: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [DellSupport] "c:\program files\dellsupport\DSAgnt.exe" /startup
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [SunJavaUpdateSched] c:\program files\java\jre6\bin\jusched.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [ShwiconXP6377] c:\program files\multimedia card reader(6337)\ShwiconX.exe
mRun: [NPSStartup]
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [ISUSPM Startup] "c:\program files\common files\installshield\updateservice\isuspm.exe" -startup
mRun: [IPHSend] c:\program files\common files\aol\iphsend\IPHSend.exe
mRun: [igfxtray] c:\windows\system32\igfxtray.exe
mRun: [igfxpers] c:\windows\system32\igfxpers.exe
mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
mRun: [HostManager] c:\program files\common files\aol\1148510780\ee\AOLSoftware.exe
mRun: [FREEzeFrogSA] "c:\program files\freezefrog\bin\2.0.13.0\FREEzeFrogSA.exe"
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [dlccmon.exe] "c:\program files\dell photo aio printer 924\dlccmon.exe"
mRun: [DLA] c:\windows\system32\dla\DLACTRLW.EXE
mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW
mRun: [ATIPTA] "c:\program files\ati technologies\ati control panel\atiptaxx.exe"
mRun: [AgataSoft ShutDown Pro] c:\program files\agatasoft\agatasoft shutdown pro\AgataSoft_ShutDown_Pro.exe
mRun: [DLCCCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\DLCCtime.dll,_RunDLLEntry@16
mRunOnce: [Malwarebytes' Anti-Malware (registration)] regsvr32.exe /s "c:\program files\malwarebytes' anti-malware\mbamext.dll"
mRunOnce: [InnoSetupRegFile.0000000001] "c:\windows\is-FBCU8.exe" /REG /REGSVRMODE
StartupFolder: c:\docume~1\admin\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office10\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {F47C1DB5-ED21-4dc1-853E-D1495792D4C5} - c:\program files\bodog poker\BPGame.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
IE: {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - {552781AF-37E4-4FEE-920A-CED9E648EADD} - c:\program files\common files\microsoft shared\encarta search bar\ENCSBAR.DLL
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
LSP: mswsock.dll
DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - hxxp://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/products/plugin/autodl/jinstall-160-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-160-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
TCP: DhcpNameServer = 10.0.1.1
TCP: Interfaces\{DD5A294A-8316-4CD3-9F97-1F59E15A2277} : NameServer = 192.168.0.1
TCP: Interfaces\{DD5A294A-8316-4CD3-9F97-1F59E15A2277} : DhcpNameServer = 10.0.1.1
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - c:\program files\common files\microsoft shared\web folders\PKMCDO.DLL
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: avgrsstarter - avgrsstx.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
mASetup: {DEF354E9-6324-46A4-A166-63B3F65A0C60} - rundll32.exe "c:\documents and settings\admin\application data\remote\hcocd.dll", UnregisterDll
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\admin\application data\mozilla\firefox\profiles\efv2aifh.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo! Search
FF - prefs.js: keyword.URL - hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_us&p=
FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\xpavgtbapi.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npunagi2.dll
FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff
FF - Ext: AVG Safe Search: {3f963a5b-e555-4543-90e2-c3908898db71} - c:\program files\avg\avg9\Firefox
FF - Ext: AVG Security Toolbar em:version=7.005.030.004 em:displayname=AVG Security Toolbar em:iconURL=chrome://tavgp/skin/logo.ico em:creator=AVG Technologies em:description=AVG Security Toolbar em:homepageURL=http://www.avg.com >: avg@igeared - c:\program files\avg\avg9\toolbar\firefox\avg@igeared
.
============= SERVICES / DRIVERS ===============
.
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-3-20 243152]
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2011-8-11 116608]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2010-3-20 216400]
S1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2010-3-20 29584]
S1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
S1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
S2 avg9emc;AVG Free E-mail Scanner;c:\program files\avg\avg9\avgemc.exe [2010-7-15 921952]
S2 avg9wd;AVG Free WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-7-15 308136]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2011-4-9 238952]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-6-13 136176]
S2 McrdSvc;Media Center Extender Service;c:\windows\ehome\McrdSvc.exe [2005-10-20 96256]
S2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe --> c:\progra~1\mcafee\viruss~1\mcshield.exe [?]
S2 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe --> c:\progra~1\mcafee\viruss~1\mcsysmon.exe [?]
S2 MouseDriver;MouseDriver;c:\documents and settings\admin\application data\MouseDriver.bat [2011-10-30 106]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg9\toolbar\ToolbarBroker.exe [2010-10-26 1025352]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2011-4-9 36608]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-6-13 136176]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2010-2-17 12872]
.
=============== Created Last 30 ================
.
2011-12-10 02:35:03 709968 ----a-w- c:\windows\is-FBCU8.exe
2011-12-10 02:21:22 709968 ----a-w- c:\windows\isRS-000.tmp
2011-12-10 00:40:49 79872 ----a-w- c:\documents and settings\all users\application data\nr1kPBjb.exe_
2011-12-10 00:23:23 -------- d-----w- c:\documents and settings\admin\application data\SUPERAntiSpyware.com
2011-11-10 03:11:58 445498 ----a-w- c:\windows\system32\PerfStringBackup.TMP
.
==================== Find3M ====================
.
2011-10-30 20:38:44 106 ---h--w- c:\documents and settings\admin\application data\MouseDriver.bat
2011-10-27 02:34:44 0 ---ha-w- c:\documents and settings\admin\djzhgsotlq.tmp
.
=================== ROOTKIT ====================
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: WDC_WD800JD-75MSA1 rev.10.01E01 -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e
.
device: opened successfully
user: MBR read successfully
.
Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys >>UNKNOWN [0x86CBBF10]<<
_asm { MOV EAX, [ESP+0x4]; MOV ECX, [EAX+0x28]; PUSH EBP; MOV EBP, [ECX+0x4]; PUSH ESI; MOV ESI, [ESP+0x10]; PUSH EDI; MOV EDI, [ESI+0x60]; MOV AL, [EDI]; CMP AL, 0x16; JNZ 0x36; PUSH ESI; }
1 nt!IofCallDriver[0x804E13B9] -> \Device\Harddisk0\DR0[0x86F68AB8]
3 CLASSPNP[0xF7525FD7] -> nt!IofCallDriver[0x804E13B9] -> [0x86D31698]
\Driver\00001073[0x86D5BB20] -> IRP_MJ_CREATE -> 0x86CBBF10
error: Read A device attached to the system is not functioning.
kernel: MBR read successfully
_asm { MOV AX, 0x0; MOV SS, AX; MOV SP, 0x7c00; MOV DS, AX; CLD ; MOV CX, 0x80; MOV SI, SP; MOV DI, 0x600; MOV ES, AX; REP MOVSD ; JMP FAR 0x0:0x62d; }
detected disk devices:
detected hooks:
\Driver\atapi DriverStartIo -> 0x86E6C2C6
user & kernel MBR OK
Warning: possible TDL3 rootkit infection !
.
============= FINISH: 20:37:57.57 ===============


This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 12/09/2011 at 22:38:32.
Operating System: Microsoft Windows XP


Processes terminated by Rkill or while it was running:



Rkill completed on 12/09/2011 at 22:38:43.

#6 blackwellbert

blackwellbert
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:08 PM

Posted 10 December 2011 - 11:43 AM

SAS was still too long! What to do?

I broke it up into 2 parts posted below.

Edited by blackwellbert, 10 December 2011 - 06:57 PM.


#7 blackwellbert

blackwellbert
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:08 PM

Posted 10 December 2011 - 06:50 PM

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/09/2011 at 07:49 PM

Application Version : 5.0.1136

Core Rules Database Version : 8037
Trace Rules Database Version: 5849

Scan type : Complete Scan
Total Scan Time : 01:15:21

Operating System Information
Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned : 314
Memory threats detected : 0
Registry items scanned : 37280
Registry threats detected : 49
File items scanned : 109286
File threats detected : 1412

Adware.Gamevance
HKCR\CLSID\{0ED403E8-470A-4A8A-85A4-D7688CFE39A3}
HKCR\CLSID\{0ED403E8-470A-4A8A-85A4-D7688CFE39A3}\InprocServer32
HKCR\CLSID\{0ED403E8-470A-4A8A-85A4-D7688CFE39A3}\InprocServer32#ThreadingModel
HKLM\Software\Classes\CLSID\{0ED403E8-470A-4a8a-85A4-D7688CFE39A3}
HKCR\CLSID\{0ED403E8-470A-4A8A-85A4-D7688CFE39A3}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run#Gamevance [ C:\Program Files\Gamevance\gamevance32.exe a ]
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D9291F9E-7010-4D7A-8DF6-455DEEF8EF51}
HKCR\CLSID\{D9291F9E-7010-4D7A-8DF6-455DEEF8EF51}
HKCR\CLSID\{D9291F9E-7010-4D7A-8DF6-455DEEF8EF51}
HKCR\CLSID\{D9291F9E-7010-4D7A-8DF6-455DEEF8EF51}\InprocServer32
HKCR\CLSID\{D9291F9E-7010-4D7A-8DF6-455DEEF8EF51}\InprocServer32#ThreadingModel
HKCR\CLSID\{D9291F9E-7010-4D7A-8DF6-455DEEF8EF51}\ProgID
HKCR\CLSID\{D9291F9E-7010-4D7A-8DF6-455DEEF8EF51}\Programmable
HKCR\CLSID\{D9291F9E-7010-4D7A-8DF6-455DEEF8EF51}\TypeLib
HKCR\CLSID\{D9291F9E-7010-4D7A-8DF6-455DEEF8EF51}\VersionIndependentProgID
HKCR\lptlIE.TextLinks.1
HKCR\lptlIE.TextLinks.1\CLSID
HKCR\lptlIE.TextLinks
HKCR\lptlIE.TextLinks\CLSID
HKCR\lptlIE.TextLinks\CurVer
HKCR\TypeLib\{8006F89E-63A1-402A-8DB7-08A4C58F95AA}
HKCR\TypeLib\{8006F89E-63A1-402A-8DB7-08A4C58F95AA}\1.0
HKCR\TypeLib\{8006F89E-63A1-402A-8DB7-08A4C58F95AA}\1.0\0
HKCR\TypeLib\{8006F89E-63A1-402A-8DB7-08A4C58F95AA}\1.0\0\win32
HKCR\TypeLib\{8006F89E-63A1-402A-8DB7-08A4C58F95AA}\1.0\FLAGS
HKCR\TypeLib\{8006F89E-63A1-402A-8DB7-08A4C58F95AA}\1.0\HELPDIR
C:\PROGRAM FILES\LIVINGPLAY\LPLAYTL.DLL
HKU\S-1-5-21-303941951-797862188-4109352829-1011\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D9291F9E-7010-4D7A-8DF6-455DEEF8EF51}
HKCR\Interface\{D4256C66-8177-4E19-8A13-2D43B2282D0D}
HKCR\Interface\{D4256C66-8177-4E19-8A13-2D43B2282D0D}\ProxyStubClsid
HKCR\Interface\{D4256C66-8177-4E19-8A13-2D43B2282D0D}\ProxyStubClsid32
HKCR\Interface\{D4256C66-8177-4E19-8A13-2D43B2282D0D}\TypeLib
HKCR\Interface\{D4256C66-8177-4E19-8A13-2D43B2282D0D}\TypeLib#Version
HKCR\Interface\{F19F56EB-DEBF-4B1A-AA72-331A0D091C26}
HKCR\Interface\{F19F56EB-DEBF-4B1A-AA72-331A0D091C26}\ProxyStubClsid
HKCR\Interface\{F19F56EB-DEBF-4B1A-AA72-331A0D091C26}\ProxyStubClsid32
HKCR\Interface\{F19F56EB-DEBF-4B1A-AA72-331A0D091C26}\TypeLib
HKCR\Interface\{F19F56EB-DEBF-4B1A-AA72-331A0D091C26}\TypeLib#Version

Trojan.Agent/Gen-Falint[RE]
[i6g8xs] C:\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\I6G8XS.EXE
C:\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\I6G8XS.EXE
C:\WINDOWS\Prefetch\I6G8XS.EXE-004B3C53.pf

Malware.Trace
HKU\.DEFAULT\SOFTWARE\XML
HKU\S-1-5-18\SOFTWARE\XML

Disabled.TaskManager
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM#DISABLETASKMGR

Trojan.Agent/Gen-MSFake
[PCTools Update] C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\WMTOOLS DOWNLOADED FILES\WMTOOLSUPDATE\WMTOOLSUP.DLL
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\WMTOOLS DOWNLOADED FILES\WMTOOLSUPDATE\WMTOOLSUP.DLL
[AskToolbar Update] C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\WMTOOLS DOWNLOADED FILES\WMTOOLSUPDATE\WMTOOLSUPDT32.DLL
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\WMTOOLS DOWNLOADED FILES\WMTOOLSUPDATE\WMTOOLSUPDT32.DLL
[JavaVerifierPolicy] C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\JAVAVERIFIERPOLICY.DLL
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\JAVAVERIFIERPOLICY.DLL
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\NETWORKX86_X64.DLL
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\SECURITYPTR.DLL
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\APPLICATION DATA\SERVICEADMIN.DLL
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\TEMP\7F6C.TMP
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\TEMP\ED1F.TMP
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\TEMP\NSTA5.TMP\BLOG.HTML
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\TEMP\NSTA5.TMP\STYLE.CSS
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\TEMP\NSTA5.TMP\TBD.TXT
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\TEMP\NSTA5.TMP\ZIP32.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00BB7A69-9B50-4AEB-9518-A4E3AEA166Dc}
HKCR\CLSID\{00BB7A69-9B50-4AEB-9518-A4E3AEA166DC}
HKCR\CLSID\{00BB7A69-9B50-4AEB-9518-A4E3AEA166DC}\InprocServer32
HKCR\CLSID\{00BB7A69-9B50-4AEB-9518-A4E3AEA166DC}\InprocServer32#ThreadingModel
HKU\S-1-5-21-303941951-797862188-4109352829-1011\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00BB7A69-9B50-4AEB-9518-A4E3AEA166DC}

Adware.Tracking Cookie
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@realmedia[1].txt [ Cookie:erika@realmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@collective-media[2].txt [ Cookie:erika@collective-media.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@apmebf[3].txt [ Cookie:erika@apmebf.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ar.atwola[1].txt [ Cookie:erika@ar.atwola.com/adlytics ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@stat.onestat[1].txt [ Cookie:erika@stat.onestat.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@usatoday1.112.2o7[1].txt [ Cookie:erika@usatoday1.112.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@adxpose[1].txt [ Cookie:erika@adxpose.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ads.pointroll[3].txt [ Cookie:erika@ads.pointroll.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@findyourartschool[2].txt [ Cookie:erika@findyourartschool.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@www.burstnet[3].txt [ Cookie:erika@www.burstnet.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@imrworldwide[2].txt [ Cookie:erika@imrworldwide.com/cgi-bin ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@nextag[2].txt [ Cookie:erika@nextag.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ar.atwola[3].txt [ Cookie:erika@ar.atwola.com/html ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@herotracking[2].txt [ Cookie:erika@herotracking.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@liveperson[4].txt [ Cookie:erika@liveperson.net/hc/72680976 ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@clicksor[1].txt [ Cookie:erika@clicksor.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@serving-sys[1].txt [ Cookie:erika@serving-sys.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@CA0VIGUF.txt [ Cookie:erika@www.free-ebooks.net/ebook/The-Dirty-Little-eBook-Of-Sex-Quotes/html/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@legolas-media[1].txt [ Cookie:erika@legolas-media.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@googleads.g.doubleclick[2].txt [ Cookie:erika@googleads.g.doubleclick.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@www.burstbeacon[3].txt [ Cookie:erika@www.burstbeacon.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@specificmedia[3].txt [ Cookie:erika@specificmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@CAGKXSME.txt [ Cookie:erika@www.free-ebooks.net/ebook/The-Dirty-Little-eBook-Of-Sex-Quotes/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@adserver.adtechus[1].txt [ Cookie:erika@adserver.adtechus.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@counter.surfcounters[1].txt [ Cookie:erika@counter.surfcounters.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@adsonar[1].txt [ Cookie:erika@adsonar.com/adserving ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@liveperson[1].txt [ Cookie:erika@liveperson.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@advertising[3].txt [ Cookie:erika@advertising.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ru4[1].txt [ Cookie:erika@ru4.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@cdn4.specificclick[2].txt [ Cookie:erika@cdn4.specificclick.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@dc.tremormedia[1].txt [ Cookie:erika@dc.tremormedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ads.bridgetrack[2].txt [ Cookie:erika@ads.bridgetrack.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@mediaforgews[2].txt [ Cookie:erika@mediaforgews.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@statsadv.dadapro[1].txt [ Cookie:erika@statsadv.dadapro.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@test.coremetrics[1].txt [ Cookie:erika@test.coremetrics.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@www.findyourartschool[2].txt [ Cookie:erika@www.findyourartschool.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@questionmarket[2].txt [ Cookie:erika@questionmarket.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@clickbank[1].txt [ Cookie:erika@clickbank.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@bs.serving-sys[2].txt [ Cookie:erika@bs.serving-sys.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@casalemedia[2].txt [ Cookie:erika@casalemedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@browseinside.harperteen[1].txt [ Cookie:erika@browseinside.harperteen.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@mediaforge[1].txt [ Cookie:erika@mediaforge.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@insightexpressai[2].txt [ Cookie:erika@insightexpressai.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@kitaramedia.122.2o7[1].txt [ Cookie:erika@kitaramedia.122.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@invitemedia[1].txt [ Cookie:erika@invitemedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@lfstmedia[2].txt [ Cookie:erika@lfstmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@care2.112.2o7[1].txt [ Cookie:erika@care2.112.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@www.findyourartschool[3].txt [ Cookie:erika@www.findyourartschool.com/programs/fine-art/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@oasn04.247realmedia[1].txt [ Cookie:erika@oasn04.247realmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@socyberty[1].txt [ Cookie:erika@socyberty.com/sexuality/tantric-sex-a-beginners-guide/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@doubleclick[1].txt [ Cookie:erika@doubleclick.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ehg.hitbox[1].txt [ Cookie:erika@ehg.hitbox.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@in.getclicky[1].txt [ Cookie:erika@in.getclicky.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@tribalfusion[1].txt [ Cookie:erika@tribalfusion.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@chitika[1].txt [ Cookie:erika@chitika.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@kontera[2].txt [ Cookie:erika@kontera.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@zedo[2].txt [ Cookie:erika@zedo.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@pro-market[1].txt [ Cookie:erika@pro-market.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@at.atwola[3].txt [ Cookie:erika@at.atwola.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@www.findyourartschool[4].txt [ Cookie:erika@www.findyourartschool.com/programs/audio-production/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@redorbit[2].txt [ Cookie:erika@redorbit.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@warnerbros.112.2o7[1].txt [ Cookie:erika@warnerbros.112.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@mediabrandsww[2].txt [ Cookie:erika@mediabrandsww.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@digitalmediaminute[3].txt [ Cookie:erika@digitalmediaminute.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@mmstat[1].txt [ Cookie:erika@mmstat.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@traveladvertising[2].txt [ Cookie:erika@traveladvertising.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@smartadx[1].txt [ Cookie:erika@smartadx.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@adtech[1].txt [ Cookie:erika@adtech.de/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@hearstmagazines.112.2o7[1].txt [ Cookie:erika@hearstmagazines.112.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ad.yieldmanager[2].txt [ Cookie:erika@ad.yieldmanager.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@liveperson[3].txt [ Cookie:erika@liveperson.net/hc/83905930 ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@network.realmedia[1].txt [ Cookie:erika@network.realmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@www.everywebsite[1].txt [ Cookie:erika@www.everywebsite.net/kids-and-teens/Fun_and_Games/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@hornymatches[2].txt [ Cookie:erika@hornymatches.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@photovote.seventeen[1].txt [ Cookie:erika@photovote.seventeen.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@click1.mainadv[1].txt [ Cookie:erika@click1.mainadv.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@adserve.mtlatl[1].txt [ Cookie:erika@adserve.mtlatl.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@mediatraffic[1].txt [ Cookie:erika@mediatraffic.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ads.redorbit[1].txt [ Cookie:erika@ads.redorbit.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@supremeadserver[1].txt [ Cookie:erika@supremeadserver.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@microsoftinternetexplorer.112.2o7[1].txt [ Cookie:erika@microsoftinternetexplorer.112.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@google[6].txt [ Cookie:erika@google.com/intl/en/ads/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@seventeen[1].txt [ Cookie:erika@seventeen.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ads.smartadx[1].txt [ Cookie:erika@ads.smartadx.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ads.networldmedia[2].txt [ Cookie:erika@ads.networldmedia.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@optimize.indieclick[1].txt [ Cookie:erika@optimize.indieclick.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@lynxtrack[1].txt [ Cookie:erika@lynxtrack.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@rotator.adjuggler[2].txt [ Cookie:erika@rotator.adjuggler.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@crackle[1].txt [ Cookie:erika@crackle.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@cms.trafficmp[1].txt [ Cookie:erika@cms.trafficmp.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@hitbox[2].txt [ Cookie:erika@hitbox.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@advertisefirst[2].txt [ Cookie:erika@advertisefirst.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@microsoftwlsearchcrm.112.2o7[1].txt [ Cookie:erika@microsoftwlsearchcrm.112.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@adserv.brandaffinity[2].txt [ Cookie:erika@adserv.brandaffinity.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@bluestreak[2].txt [ Cookie:erika@bluestreak.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@rainbowmedia.122.2o7[1].txt [ Cookie:erika@rainbowmedia.122.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@server.iad.liveperson[1].txt [ Cookie:erika@server.iad.liveperson.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@wetv.trymedia[1].txt [ Cookie:erika@wetv.trymedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@server.cpmstar[2].txt [ Cookie:erika@server.cpmstar.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@feed.validclick[2].txt [ Cookie:erika@feed.validclick.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@media303[1].txt [ Cookie:erika@media303.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@gostats[1].txt [ Cookie:erika@gostats.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@click2go[1].txt [ Cookie:erika@click2go.org/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@trafficmp[1].txt [ Cookie:erika@trafficmp.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ads.gamersmedia[1].txt [ Cookie:erika@ads.gamersmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@servedby.adxpower[1].txt [ Cookie:erika@servedby.adxpower.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@affiliates.commissionaccount[2].txt [ Cookie:erika@affiliates.commissionaccount.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@linksynergy[2].txt [ Cookie:erika@linksynergy.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@partners.agamimedia[2].txt [ Cookie:erika@partners.agamimedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@www5.addfreestats[1].txt [ Cookie:erika@www5.addfreestats.com/cgi-bin ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@eaeacom.112.2o7[1].txt [ Cookie:erika@eaeacom.112.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@track.right-ads[1].txt [ Cookie:erika@track.right-ads.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@www.traveladvertising[1].txt [ Cookie:erika@www.traveladvertising.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@www9.addfreestats[1].txt [ Cookie:erika@www9.addfreestats.com/cgi-bin ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ad1.clickhype[1].txt [ Cookie:erika@ad1.clickhype.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@revsci[6].txt [ Cookie:erika@revsci.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@mediaplex[4].txt [ Cookie:erika@mediaplex.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@smartadserver[1].txt [ Cookie:erika@smartadserver.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@click.qeg[1].txt [ Cookie:erika@click.qeg.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@divx.112.2o7[1].txt [ Cookie:erika@divx.112.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@advertising.sheknows[1].txt [ Cookie:erika@advertising.sheknows.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@2o7[1].txt [ Cookie:erika@2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@247realmedia[1].txt [ Cookie:erika@247realmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@teenreads[1].txt [ Cookie:erika@teenreads.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@dmtracker[1].txt [ Cookie:erika@dmtracker.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@giftscom.122.2o7[1].txt [ Cookie:erika@giftscom.122.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@themediakings[1].txt [ Cookie:erika@themediakings.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@amtk-media[2].txt [ Cookie:erika@amtk-media.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@r1-ads.ace.advertising[3].txt [ Cookie:erika@r1-ads.ace.advertising.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@xtreme-advertising[2].txt [ Cookie:erika@xtreme-advertising.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@ads.addynamix[2].txt [ Cookie:erika@ads.addynamix.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@xiti[1].txt [ Cookie:erika@xiti.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@content.yieldmanager[6].txt [ Cookie:erika@content.yieldmanager.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@socialadserve[2].txt [ Cookie:erika@socialadserve.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@a.websponsors[2].txt [ Cookie:erika@a.websponsors.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@www.googleadservices[4].txt [ Cookie:erika@www.googleadservices.com/pagead/conversion/1064505310/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@atdmt[5].txt [ Cookie:erika@atdmt.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@click.eyk[1].txt [ Cookie:erika@click.eyk.net/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@tacoda.at.atwola[3].txt [ Cookie:erika@tacoda.at.atwola.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@beachstreetmedia[2].txt [ Cookie:erika@beachstreetmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@www.oatracking[1].txt [ Cookie:erika@www.oatracking.com/ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\Cookies\erika@overture[2].txt [ Cookie:erika@overture.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@isparkmedia[1].txt [ Cookie:guest@isparkmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@adinterax[1].txt [ Cookie:guest@adinterax.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.googleadservices[7].txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1065759433/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@revsci[1].txt [ Cookie:guest@revsci.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.googleadservices[4].txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1053965053/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@doubleclick[1].txt [ Cookie:guest@doubleclick.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@imrworldwide[2].txt [ Cookie:guest@imrworldwide.com/cgi-bin ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@media6degrees[2].txt [ Cookie:guest@media6degrees.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@mm.chitika[1].txt [ Cookie:guest@mm.chitika.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@rmediatrack[1].txt [ Cookie:guest@rmediatrack.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@invitemedia[1].txt [ Cookie:guest@invitemedia.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@oasn04.247realmedia[1].txt [ Cookie:guest@oasn04.247realmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@google[2].txt [ Cookie:guest@google.com/accounts/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@CA66D05C.txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1032191036/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@lucidmedia[2].txt [ Cookie:guest@lucidmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@tracking.lmayr[1].txt [ Cookie:guest@tracking.lmayr.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@liveperson[3].txt [ Cookie:guest@liveperson.net/hc/85354271 ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@content.yieldmanager[1].txt [ Cookie:guest@content.yieldmanager.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@statse.webtrendslive[2].txt [ Cookie:guest@statse.webtrendslive.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@counters.gigya[1].txt [ Cookie:guest@counters.gigya.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.burstnet[1].txt [ Cookie:guest@www.burstnet.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@trafficmp[1].txt [ Cookie:guest@trafficmp.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.grdte[1].txt [ Cookie:guest@www.grdte.com/track/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@pro-market[1].txt [ Cookie:guest@pro-market.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@realmedia[1].txt [ Cookie:guest@realmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@mediaplex[2].txt [ Cookie:guest@mediaplex.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@adbrite[2].txt [ Cookie:guest@adbrite.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@specificmedia[1].txt [ Cookie:guest@specificmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@libertymutual.112.2o7[1].txt [ Cookie:guest@libertymutual.112.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@mybanktracker[2].txt [ Cookie:guest@mybanktracker.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.googleadservices[5].txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1029097726/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@da-tracking[2].txt [ Cookie:guest@da-tracking.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@casalemedia[2].txt [ Cookie:guest@casalemedia.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@lynxtrack[1].txt [ Cookie:guest@lynxtrack.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@googleads.g.doubleclick[1].txt [ Cookie:guest@googleads.g.doubleclick.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@tribalfusion[2].txt [ Cookie:guest@tribalfusion.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@liveperson[1].txt [ Cookie:guest@liveperson.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@CAUG44YJ.txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1068757340/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@questionmarket[2].txt [ Cookie:guest@questionmarket.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@insightexpressai[1].txt [ Cookie:guest@insightexpressai.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@interclick[2].txt [ Cookie:guest@interclick.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@adserver.adtechus[1].txt [ Cookie:guest@adserver.adtechus.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@ru4[2].txt [ Cookie:guest@ru4.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@pointroll[2].txt [ Cookie:guest@pointroll.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@mediabrandsww[1].txt [ Cookie:guest@mediabrandsww.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@dmtracker[1].txt [ Cookie:guest@dmtracker.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@CAHTRK8P.txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1071981023/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@account.frogster-america[1].txt [ Cookie:guest@account.frogster-america.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@collective-media[1].txt [ Cookie:guest@collective-media.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@adxpose[1].txt [ Cookie:guest@adxpose.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@surveyfindweb[2].txt [ Cookie:guest@surveyfindweb.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@onlinerewardcenter[2].txt [ Cookie:guest@onlinerewardcenter.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@eemtracking[1].txt [ Cookie:guest@eemtracking.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@astoneuabtrack[1].txt [ Cookie:guest@astoneuabtrack.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@at.atwola[2].txt [ Cookie:guest@at.atwola.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.googleadservices[2].txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1071666997/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@advertising[1].txt [ Cookie:guest@advertising.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@adtech[1].txt [ Cookie:guest@adtech.de/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@in.getclicky[1].txt [ Cookie:guest@in.getclicky.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@richmedia.yahoo[1].txt [ Cookie:guest@richmedia.yahoo.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@track.freegiftcenter[2].txt [ Cookie:guest@track.freegiftcenter.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@originmachina[1].txt [ Cookie:guest@originmachina.com/track/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@mtvn.112.2o7[1].txt [ Cookie:guest@mtvn.112.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@tacoda.at.atwola[1].txt [ Cookie:guest@tacoda.at.atwola.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@tracking.ostiole[2].txt [ Cookie:guest@tracking.ostiole.info/cpl/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.tracklead[2].txt [ Cookie:guest@www.tracklead.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@milesmedia.122.2o7[1].txt [ Cookie:guest@milesmedia.122.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@qksrv[2].txt [ Cookie:guest@qksrv.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@burstnet[1].txt [ Cookie:guest@burstnet.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@burstbeacon[1].txt [ Cookie:guest@burstbeacon.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.burstbeacon[1].txt [ Cookie:guest@www.burstbeacon.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.googleadservices[11].txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1060726907/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@healthyadvice.122.2o7[1].txt [ Cookie:guest@healthyadvice.122.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.qksrv[1].txt [ Cookie:guest@www.qksrv.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@ar.atwola[1].txt [ Cookie:guest@ar.atwola.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@kitaramedia.122.2o7[1].txt [ Cookie:guest@kitaramedia.122.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@ads.bridgetrack[1].txt [ Cookie:guest@ads.bridgetrack.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@track.statsapi[1].txt [ Cookie:guest@track.statsapi.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@findarticles[2].txt [ Cookie:guest@findarticles.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@counter2.hitslink[1].txt [ Cookie:guest@counter2.hitslink.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@mediacenter.motorola[2].txt [ Cookie:guest@mediacenter.motorola.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@walmart.112.2o7[1].txt [ Cookie:guest@walmart.112.2o7.net/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@content.yieldmanager[3].txt [ Cookie:guest@content.yieldmanager.com/ak/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@overture[2].txt [ Cookie:guest@overture.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.7tracking[1].txt [ Cookie:guest@www.7tracking.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.googleadservices[8].txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1043211430/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@legolas-media[1].txt [ Cookie:guest@legolas-media.com/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@www.googleadservices[9].txt [ Cookie:guest@www.googleadservices.com/pagead/conversion/1033305536/ ]
C:\DOCUMENTS AND SETTINGS\GUEST\Cookies\guest@anrtx.tacoda[1].txt [ Cookie:guest@anrtx.tacoda.net/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@ru4[3].txt [ Cookie:system@ru4.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@imrworldwide[3].txt [ Cookie:system@imrworldwide.com/cgi-bin ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@www.burstnet[2].txt [ Cookie:system@www.burstnet.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@ads.gamersmedia[1].txt [ Cookie:system@ads.gamersmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@fastclick[3].txt [ Cookie:system@fastclick.net/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@dc.tremormedia[3].txt [ Cookie:system@dc.tremormedia.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@pointroll[3].txt [ Cookie:system@pointroll.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@myroitracking[3].txt [ Cookie:system@myroitracking.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@media6degrees[1].txt [ Cookie:system@media6degrees.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@revsci[3].txt [ Cookie:system@revsci.net/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@a1.interclick[2].txt [ Cookie:system@a1.interclick.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@akamai.interclickproxy[3].txt [ Cookie:system@akamai.interclickproxy.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@www.pornhub[1].txt [ Cookie:system@www.pornhub.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@atdmt[3].txt [ Cookie:system@atdmt.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@doubleclick[3].txt [ Cookie:system@doubleclick.net/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@pubads.g.doubleclick[1].txt [ Cookie:system@pubads.g.doubleclick.net/gampad/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@ads2.zeusclicks[1].txt [ Cookie:system@ads2.zeusclicks.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@eyewonder[2].txt [ Cookie:system@eyewonder.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@eyeviewads[2].txt [ Cookie:system@eyeviewads.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@lucidmedia[2].txt [ Cookie:system@lucidmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@linksynergy[1].txt [ Cookie:system@linksynergy.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@clicks.thespecialsearch[2].txt [ Cookie:system@clicks.thespecialsearch.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@trafficmp[3].txt [ Cookie:system@trafficmp.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@burstbeacon[1].txt [ Cookie:system@burstbeacon.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@ads.pointroll[3].txt [ Cookie:system@ads.pointroll.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@amazon-adsystem[2].txt [ Cookie:system@amazon-adsystem.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@realmedia[3].txt [ Cookie:system@realmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@us.battle[1].txt [ Cookie:system@us.battle.net/account ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@www.burstbeacon[1].txt [ Cookie:system@www.burstbeacon.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@uiadserver[1].txt [ Cookie:system@uiadserver.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@burstnet[3].txt [ Cookie:system@burstnet.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@adbrite[2].txt [ Cookie:system@adbrite.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@cdn.eyewonder[2].txt [ Cookie:system@cdn.eyewonder.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@yieldmanager[1].txt [ Cookie:system@yieldmanager.net/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@adxpose[2].txt [ Cookie:system@adxpose.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@apmebf[3].txt [ Cookie:system@apmebf.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@advertise[1].txt [ Cookie:system@advertise.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@realmedianetwork[1].txt [ Cookie:system@realmedianetwork.net/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@bs.serving-sys[2].txt [ Cookie:system@bs.serving-sys.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@pro-market[3].txt [ Cookie:system@pro-market.net/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@entrepreneur[1].txt [ Cookie:system@entrepreneur.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@casalemedia[3].txt [ Cookie:system@casalemedia.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@tag.2bluemedia.hiro[1].txt [ Cookie:system@tag.2bluemedia.hiro.tv/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@adserver.adtechus[2].txt [ Cookie:system@adserver.adtechus.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@questionmarket[3].txt [ Cookie:system@questionmarket.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@filter.plusfind[2].txt [ Cookie:system@filter.plusfind.net/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@r1-ads.ace.advertising[2].txt [ Cookie:system@r1-ads.ace.advertising.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@network.realmedia[3].txt [ Cookie:system@network.realmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@brandspotmedia[1].txt [ Cookie:system@brandspotmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@tribalfusion[3].txt [ Cookie:system@tribalfusion.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@statcounter[2].txt [ Cookie:system@statcounter.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@traveladvertising[2].txt [ Cookie:system@traveladvertising.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@247realmedia[1].txt [ Cookie:system@247realmedia.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@mediaservices-d.openxenterprise[2].txt [ Cookie:system@mediaservices-d.openxenterprise.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@adtech[2].txt [ Cookie:system@adtech.de/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@cdn.jemamedia[3].txt [ Cookie:system@cdn.jemamedia.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@clicksor[3].txt [ Cookie:system@clicksor.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@web-traffic-analysis[2].txt [ Cookie:system@web-traffic-analysis.net/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@mm.chitika[3].txt [ Cookie:system@mm.chitika.net/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@youngbucks.rotator.hadj7.adjuggler[2].txt [ Cookie:system@youngbucks.rotator.hadj7.adjuggler.net/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@exoclick[1].txt [ Cookie:system@exoclick.com/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@aimfar.solution.weborama[2].txt [ Cookie:system@aimfar.solution.weborama.fr/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@www.googleadservices[1].txt [ Cookie:system@www.googleadservices.com/pagead/conversion/1012615621/ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\system@micklemedia[2].txt [ Cookie:system@micklemedia.com/ ]
ad.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\85ML76X5 ]
cdn.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\85ML76X5 ]
convoad.technoratimedia.net [ C:\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\85ML76X5 ]
crackle.com [ C:\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\85ML76X5 ]
media.mtvnservices.com [ C:\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\85ML76X5 ]
media.scanscout.com [ C:\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\85ML76X5 ]
objects.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\85ML76X5 ]
s0.2mdn.net [ C:\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\85ML76X5 ]
secure-us.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\85ML76X5 ]
www.goodcholesterolcount.com [ C:\DOCUMENTS AND SETTINGS\ADMIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\85ML76X5 ]
objects.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\FQ6MJ3B3 ]
video.redorbit.com [ C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\FQ6MJ3B3 ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\K04FMQ41.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\K04FMQ41.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\K04FMQ41.DEFAULT\COOKIES.SQLITE ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9DB8FVMX ]
media.ign.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9DB8FVMX ]
msnbcmedia.msn.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9DB8FVMX ]
naiadsystems.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9DB8FVMX ]
www.pornhub.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9DB8FVMX ]
wwwstatic.megaporn.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\9DB8FVMX ]
stat.onestat.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
stat.onestat.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.andomedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.specificmedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.adxpose.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
www.find-quick-results.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.advertise.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
counter.surfcounters.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.mediabrandsww.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.www.burstnet.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
www.burstnet.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
www.burstbeacon.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.ar.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
flagcounter.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.gostats.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.teenviolencestatistics.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.teenviolencestatistics.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.teenviolencestatistics.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
dc.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\ZJNPBT67.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ar.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ar.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tacoda.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.chitika.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adserver.adtechus.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.realmedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mediaplex.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.247realmedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
dc.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.dmtracker.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adserver.adreactor.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
srv.clickfuse.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
statse.webtrendslive.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
cache.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.burstbeacon.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.burstbeacon.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zedo.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.kanoodle.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.msnbc.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tacoda.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tacoda.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tacoda.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tacoda.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tacoda.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.msnportal.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.pornhub.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
click.superpaysys.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
click.superpaysys.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
app.insightgrit.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
v.u.d.cltomedia.info [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
cltomedia.info [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.wsuperpokeraffiliates.122.2o7.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
click.mediadome.ru [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
click.mediadome.ru [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
click.mediadome.ru [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
citi.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
citi.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
citi.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
citi.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.burstnet.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
advertising.sheknows.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.specificmedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.247realmedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.247realmedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.247realmedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.apmebf.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.oasn04.247realmedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.realmedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
network.realmedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fastclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.www.burstnet.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.burstnet.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.burstnet.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.mediaplex.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adxpose.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.atdmt.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.microsoftinternetexplorer.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.yieldmanager.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
adservingdaddy.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.legolas-media.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bluestreak.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.advertising.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adlegend.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adlegend.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.bs.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
cdn1.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
cdn1.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.trafficmp.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pornhub.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pornhub.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pornhub.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adultfriendfinder.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adultfriendfinder.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adultfriendfinder.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adultfriendfinder.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adultfriendfinder.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adultfriendfinder.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adultfriendfinder.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.adultfriendfinder.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fortunecity.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zedo.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zedo.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zedo.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fortunecity.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fortunecity.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.casalemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.content.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fortunecity.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zedo.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zedo.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.zedo.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fortunecity.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fortunecity.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pornhub.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pornhub.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fastclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fastclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.fastclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pornhub.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pornhub.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.questionmarket.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.questionmarket.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.revsci.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.tribalfusion.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.questionmarket.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.otterproducts.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
.statcounter.com [ C:\DOCUMENTS AND SETTINGS\COLIN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
a.media.abcfamily.go.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
adimages.scrippsnetworks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
cdn.eyewonder.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
cloud.video.unrulymedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
convoad.technoratimedia.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
core.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
crackle.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
ia.media-imdb.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
macromedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
media.heavy.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
media.mtvnservices.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
media.scanscout.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
media1.break.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
media10.washingtonpost.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
mediacast.realgravity.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
mediaforgews.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
mi.adinterax.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
objects.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
s0.2mdn.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
secure-us.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
serving-sys.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
seventeen.ar-live.de [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
udn.specificclick.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
video.redorbit.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\J5LXSJ7H ]
.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
ads.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ad.velmedia.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.velmedia.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.network.realmedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.specificmedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.yieldmanager.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
counter.hitslink.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.lfstmedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.adserver.adtechus.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
dc.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.adxpose.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
user.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
stat.onestat.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
stat.onestat.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.mediabrandsww.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.burstbeacon.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.dmtracker.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.edge.ru4.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.edge.ru4.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ar.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
ar.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
stat.onestat.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.linksynergy.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.linksynergy.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.linksynergy.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.redorbit.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.redorbit.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.redorbit.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.redorbit.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.harrenmedianetwork.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.visit-tracker.biz [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.visit-tracker.biz [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.visit-tracker.biz [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.visit-tracker.biz [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.azjmp.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.specificmedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.mm.chitika.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]

#8 blackwellbert

blackwellbert
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:08 PM

Posted 10 December 2011 - 06:56 PM

fidelity.rotator.hadj7.adjuggler.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
fidelity.rotator.hadj7.adjuggler.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.game-advertising-online.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
stat.onestat.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ad.velmedia.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.server.cpmstar.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.frostclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.frostclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.frostclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
adserving.versaneeds.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.dealfind.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.dealfind.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.dealfind.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.warnerbros.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.kontera.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.legolas-media.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.hornymatches.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.hornymatches.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.pubads.g.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.pubads.g.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ar.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.adinterax.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.adinterax.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.frostclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.cracked.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.cracked.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.cracked.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.cracked.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.cracked.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.cracked.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.bizrate.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.mediaforge.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.walmart.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.linksynergy.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
d.mediaforge.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.target.db.advertising.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.tracking.parktastic.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
stat.onestat.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
ox-d.fondnessmedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.dealfind.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.dealfind.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.d3.zedo.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.d3.zedo.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.clicksor.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
roiclicks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.linksynergy.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
adserv.rotator.hadj7.adjuggler.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
adserv.rotator.hadj7.adjuggler.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
gotacha.rotator.hadj7.adjuggler.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
gotacha.rotator.hadj7.adjuggler.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
wstat.wibiya.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.adlegend.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.adlegend.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.httptrack.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.httptrack.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.xm.xtendmedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
stat.onestat.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
ads.networldmedia.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
ads.networldmedia.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.www.burstnet.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.lfstmedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.lfstmedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
sillysteenecks.blogspot.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
sillysteenecks.blogspot.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
on-the-write-track.blogspot.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
on-the-write-track.blogspot.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.octofinder.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.www.octofinder.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.bravenet.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
ph.2.cqcounter.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.technoratimedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.technoratimedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.technoratimedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.technoratimedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.technoratimedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
s07.flagcounter.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.cracked.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.viewablemedia.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.thoughtquestions.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.thoughtquestions.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.technoratimedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
in.getclicky.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.traveladvertising.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.traveladvertising.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.synonym-finder.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.synonym-finder.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.synonym-finder.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.burstnet.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
login.tracking101.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.r1-ads.ace.advertising.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.harperteen.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.browseinside.harperteen.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.browseinside.harperteen.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.browseinside.harperteen.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.browseinside.harperteen.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.browseinside.harperteen.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.browseinside.harperteen.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.harperteen.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.harperteen.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.harperteen.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
ads.redorbit.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.server.cpmstar.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.server.cpmstar.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.server.cpmstar.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.server.cpmstar.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.myroitracking.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.track.supercoolprizes.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.track.supercoolprizes.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.eemtracking.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.nextag.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.nextag.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
auth.breakmedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
ox-d.w00tmedia.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.azjmp.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.adtechus.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.clicker.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.clicker.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.clicker.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
www.clicker.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.divx.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
data.coremetrics.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.indieclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
optimize.indieclick.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.rambler.ru [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.rambler.ru [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
count.rbc.ru [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.rambler.ru [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.medialand.relax.ru [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.medialand.relax.ru [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.medialand.relax.ru [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
8tracks.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.technoratimedia.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
adserver.baeblemusic.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ar.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.mattthomas.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
s08.flagcounter.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
tracking.servedbyy.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
tracking.servedbyy.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.kanoodle.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.adserver.adtechus.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.maxvelocitytrack.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.googleads.g.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
ads.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
ads.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
ads.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
ads.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.content.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
.mtvn.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\ERIKA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\YI7TK6V8.DEFAULT\COOKIES.SQLITE ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@A1.INTERCLICK[1].TXT [ /A1.INTERCLICK ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@AD.WSOD[2].TXT [ /AD.WSOD ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@AD.YIELDMANAGER[1].TXT [ /AD.YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@AD.YIELDMANAGER[4].TXT [ /AD.YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@AD.YIELDMANAGER[5].TXT [ /AD.YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@AD1.ADTITAN[1].TXT [ /AD1.ADTITAN ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADBRITE[2].TXT [ /ADBRITE ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADECN[1].TXT [ /ADECN ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADLEGEND[1].TXT [ /ADLEGEND ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADPLY.PLYMEDIA[1].TXT [ /ADPLY.PLYMEDIA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS-SVX.ADBRITE[1].TXT [ /ADS-SVX.ADBRITE ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.AD4GAME[1].TXT [ /ADS.AD4GAME ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.ADK2[1].TXT [ /ADS.ADK2 ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.ADVANCEDMN[1].TXT [ /ADS.ADVANCEDMN ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.BCSERVING[1].TXT [ /ADS.BCSERVING ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.BCSERVING[3].TXT [ /ADS.BCSERVING ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.CELLFISH[2].TXT [ /ADS.CELLFISH ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.CHRISTIANPOST[2].TXT [ /ADS.CHRISTIANPOST ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.CINEBLE[1].TXT [ /ADS.CINEBLE ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.CNN[1].TXT [ /ADS.CNN ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.CONTACTMUSIC[1].TXT [ /ADS.CONTACTMUSIC ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.E-PLANNING[1].TXT [ /ADS.E-PLANNING ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.FLIXADDICT[1].TXT [ /ADS.FLIXADDICT ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.GMODULES[1].TXT [ /ADS.GMODULES ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.INTERGI[1].TXT [ /ADS.INTERGI ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.LZJL[1].TXT [ /ADS.LZJL ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.MOVIEASE[3].TXT [ /ADS.MOVIEASE ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.MYADPLATFORM[2].TXT [ /ADS.MYADPLATFORM ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.OURSTAGE[2].TXT [ /ADS.OURSTAGE ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.POINTROLL[1].TXT [ /ADS.POINTROLL ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.PUBMATIC[1].TXT [ /ADS.PUBMATIC ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.REELHD[3].TXT [ /ADS.REELHD ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.REELVIDZ[1].TXT [ /ADS.REELVIDZ ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.ROISERVER[1].TXT [ /ADS.ROISERVER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.TMNETADS[1].TXT [ /ADS.TMNETADS ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.TNT[1].TXT [ /ADS.TNT ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.UNDERTONE[2].TXT [ /ADS.UNDERTONE ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADS.US.E-PLANNING[1].TXT [ /ADS.US.E-PLANNING ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADSERVER.ADPREDICTIVE[2].TXT [ /ADSERVER.ADPREDICTIVE ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADSERVER.ADREACTOR[1].TXT [ /ADSERVER.ADREACTOR ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ADVERTISING[1].TXT [ /ADVERTISING ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@AMEX-INSIGHTS[1].TXT [ /AMEX-INSIGHTS ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ANIME-MEDIA[2].TXT [ /ANIME-MEDIA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@APMEBF[2].TXT [ /APMEBF ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@AT.ATWOLA[2].TXT [ /AT.ATWOLA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ATDMT[1].TXT [ /ATDMT ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ATDMT[2].TXT [ /ATDMT ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ATDMT[3].TXT [ /ATDMT ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ATDMT[4].TXT [ /ATDMT ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ATWOLA[2].TXT [ /ATWOLA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@ATWOLA[3].TXT [ /ATWOLA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@AZJMP[2].TXT [ /AZJMP ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@BS.SERVING-SYS[1].TXT [ /BS.SERVING-SYS ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@BURSTNET[1].TXT [ /BURSTNET ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@CDN1.TRAFFICMP[2].TXT [ /CDN1.TRAFFICMP ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@CONTENT.YIELDMANAGER[1].TXT [ /CONTENT.YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@CONTENT.YIELDMANAGER[2].TXT [ /CONTENT.YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@CONTENT.YIELDMANAGER[3].TXT [ /CONTENT.YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@CONTENT.YIELDMANAGER[4].TXT [ /CONTENT.YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@CONTENT.YIELDMANAGER[7].TXT [ /CONTENT.YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@DC.TREMORMEDIA[2].TXT [ /DC.TREMORMEDIA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@DIGITALMEDIAMINUTE[1].TXT [ /DIGITALMEDIAMINUTE ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@EAS.APM.EMEDIATE[1].TXT [ /EAS.APM.EMEDIATE ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@EDGEADX[1].TXT [ /EDGEADX ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@EYEWONDER[1].TXT [ /EYEWONDER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@FASTCLICK[1].TXT [ /FASTCLICK ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@FASTCLICK[3].TXT [ /FASTCLICK ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@FASTCLICK[4].TXT [ /FASTCLICK ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@FASTCLICK[5].TXT [ /FASTCLICK ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@FIDELITY.ROTATOR.HADJ7.ADJUGGLER[1].TXT [ /FIDELITY.ROTATOR.HADJ7.ADJUGGLER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@GOTACHA.ROTATOR.HADJ7.ADJUGGLER[1].TXT [ /GOTACHA.ROTATOR.HADJ7.ADJUGGLER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@HARPERTEEN[1].TXT [ /HARPERTEEN ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@HG1.HITBOX[2].TXT [ /HG1.HITBOX ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@INTERCLICK[2].TXT [ /INTERCLICK ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@INTERMUNDOMEDIA[2].TXT [ /INTERMUNDOMEDIA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@LUCIDMEDIA[1].TXT [ /LUCIDMEDIA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@LUCIDMEDIA[3].TXT [ /LUCIDMEDIA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@MEDIA.ADFRONTIERS[2].TXT [ /MEDIA.ADFRONTIERS ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@MEDIA6DEGREES[1].TXT [ /MEDIA6DEGREES ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@MEDIA6DEGREES[3].TXT [ /MEDIA6DEGREES ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@MEDIABRANDSWW[1].TXT [ /MEDIABRANDSWW ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@MEDIAPLEX[1].TXT [ /MEDIAPLEX ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@MEDIAPLEX[2].TXT [ /MEDIAPLEX ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@MICROSOFTWLCASHBACK.112.2O7[1].TXT [ /MICROSOFTWLCASHBACK.112.2O7 ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@MYROITRACKING[1].TXT [ /MYROITRACKING ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@MYWEBSEARCH[1].TXT [ /MYWEBSEARCH ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@NEOEDGE.ADBUREAU[2].TXT [ /NEOEDGE.ADBUREAU ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@POINTROLL[1].TXT [ /POINTROLL ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@QUESTIONMARKET[1].TXT [ /QUESTIONMARKET ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@R1-ADS.ACE.ADVERTISING[1].TXT [ /R1-ADS.ACE.ADVERTISING ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@R1-ADS.ACE.ADVERTISING[2].TXT [ /R1-ADS.ACE.ADVERTISING ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@REVSCI[1].TXT [ /REVSCI ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@REVSCI[2].TXT [ /REVSCI ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@REVSCI[3].TXT [ /REVSCI ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@REVSCI[4].TXT [ /REVSCI ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@SERVING-SYS[2].TXT [ /SERVING-SYS ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@SERVING-SYS[3].TXT [ /SERVING-SYS ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@SPECIFICCLICK[1].TXT [ /SPECIFICCLICK ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@SPECIFICCLICK[3].TXT [ /SPECIFICCLICK ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@SPECIFICMEDIA[2].TXT [ /SPECIFICMEDIA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@STATCOUNTER[2].TXT [ /STATCOUNTER ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@SURVEYMONKEY.122.2O7[1].TXT [ /SURVEYMONKEY.122.2O7 ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@TACODA.AT.ATWOLA[1].TXT [ /TACODA.AT.ATWOLA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@TACODA[1].TXT [ /TACODA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@TACODA[2].TXT [ /TACODA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@THEMEDIALORDS[2].TXT [ /THEMEDIALORDS ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@TRAFFICKING.NABBR[1].TXT [ /TRAFFICKING.NABBR ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@TRIPOD[1].TXT [ /TRIPOD ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@TRVLNET.ADBUREAU[2].TXT [ /TRVLNET.ADBUREAU ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@VIACOM.ADBUREAU[2].TXT [ /VIACOM.ADBUREAU ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@VIDEOEGG.ADBUREAU[2].TXT [ /VIDEOEGG.ADBUREAU ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@WWW.BLOGFORQUESTION[2].TXT [ /WWW.BLOGFORQUESTION ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@WWW.BURSTBEACON[1].TXT [ /WWW.BURSTBEACON ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@WWW.BURSTNET[1].TXT [ /WWW.BURSTNET ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@WWW.GOOGLEADSERVICES[1].TXT [ /WWW.GOOGLEADSERVICES ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@WWW.SEVENTEEN[1].TXT [ /WWW.SEVENTEEN ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@WWW.TLTRACK[1].TXT [ /WWW.TLTRACK ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@XM.XTENDMEDIA[1].TXT [ /XM.XTENDMEDIA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@XM.XTENDMEDIA[2].TXT [ /XM.XTENDMEDIA ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@YADRO[1].TXT [ /YADRO ]
C:\DOCUMENTS AND SETTINGS\ERIKA\COOKIES\ERIKA@YIELDMANAGER[1].TXT [ /YIELDMANAGER ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\BKPUCG7X ]
media.mtvnservices.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\BKPUCG7X ]
s0.2mdn.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\BKPUCG7X ]
secure-us.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\BKPUCG7X ]
.avgtechnologies.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.doubleclick.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
www.qsstats.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
www.qsstats.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.chitika.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.apmebf.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.specificclick.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.specificmedia.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.lfstmedia.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.eyewonder.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.milesmedia.122.2o7.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.traveladvertising.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
adserver.matchcraft.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.dominionenterprises.112.2o7.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.viacom.adbureau.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.statcounter.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.view.atdmt.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.interclick.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.roiservice.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
tracking.admarketplace.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.mediaforge.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.media6degrees.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
a.intentmedia.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
a.intentmedia.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.invitemedia.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.ihg.db.advertising.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.adserver.adtechus.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.adserver.adtechus.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.collective-media.net [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.adxpose.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
tracking.callmeasurement.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
tracking.callmeasurement.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
tracking.callmeasurement.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
wstat.wibiya.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.123findacar.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
.123findacar.com [ C:\DOCUMENTS AND SETTINGS\GUEST\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\NLXMIVL5.DEFAULT\COOKIES.SQLITE ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@A1.INTERCLICK[1].TXT [ /A1.INTERCLICK ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ACCOUNTS.YOUTUBE[1].TXT [ /ACCOUNTS.YOUTUBE ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@AD.WSOD[1].TXT [ /AD.WSOD ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@AD.WSOD[3].TXT [ /AD.WSOD ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@AD.YIELDMANAGER[1].TXT [ /AD.YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@AD.YIELDMANAGER[2].TXT [ /AD.YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ADINTERAX[2].TXT [ /ADINTERAX ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ADS.BELOINTERACTIVE[2].TXT [ /ADS.BELOINTERACTIVE ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ADS.EASYAUTOSALES[2].TXT [ /ADS.EASYAUTOSALES ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ADS.GLISPA[2].TXT [ /ADS.GLISPA ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ADS.INTERGI[1].TXT [ /ADS.INTERGI ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ADS.NBA[1].TXT [ /ADS.NBA ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ADS.POINTROLL[2].TXT [ /ADS.POINTROLL ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ADS.PUBMATIC[1].TXT [ /ADS.PUBMATIC ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ADS.SHORTTAIL[2].TXT [ /ADS.SHORTTAIL ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ADS.UNDERTONE[2].TXT [ /ADS.UNDERTONE ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ADSERVING.AUTOTRADER[1].TXT [ /ADSERVING.AUTOTRADER ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@APMEBF[1].TXT [ /APMEBF ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ATDMT[2].TXT [ /ATDMT ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ATDMT[3].TXT [ /ATDMT ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@AZJMP[2].TXT [ /AZJMP ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@CTS.METRICSDIRECT[2].TXT [ /CTS.METRICSDIRECT ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@CTS.ZROITRACKER[1].TXT [ /CTS.ZROITRACKER ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@FASTCLICK[1].TXT [ /FASTCLICK ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@FINDLAW[1].TXT [ /FINDLAW ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@MEDIA.ADFRONTIERS[2].TXT [ /MEDIA.ADFRONTIERS ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@MMOTRAFFIC[2].TXT [ /MMOTRAFFIC ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@QUESTIONMARKET[1].TXT [ /QUESTIONMARKET ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@QUESTIONMARKET[3].TXT [ /QUESTIONMARKET ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@R1-ADS.ACE.ADVERTISING[2].TXT [ /R1-ADS.ACE.ADVERTISING ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@S.CLICKABILITY[2].TXT [ /S.CLICKABILITY ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@SDTRACKS[2].TXT [ /SDTRACKS ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@SERVING-SYS[1].TXT [ /SERVING-SYS ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@SPECIFICCLICK[1].TXT [ /SPECIFICCLICK ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@STAT.ONESTAT[2].TXT [ /STAT.ONESTAT ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@STATCOUNTER[1].TXT [ /STATCOUNTER ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@TRACK.ABOUTDESK[1].TXT [ /TRACK.ABOUTDESK ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@TRACK.THEBESTBUY[2].TXT [ /TRACK.THEBESTBUY ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@TRAFFIC.PROD.COBALTGROUP[1].TXT [ /TRAFFIC.PROD.COBALTGROUP ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@TRAVELADVERTISING[1].TXT [ /TRAVELADVERTISING ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@WEB.CLICKZTRAK[1].TXT [ /WEB.CLICKZTRAK ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@WWW.GOOGLEADSERVICES[10].TXT [ /WWW.GOOGLEADSERVICES ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@WWW.GOOGLEADSERVICES[1].TXT [ /WWW.GOOGLEADSERVICES ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@WWW.GOOGLEADSERVICES[3].TXT [ /WWW.GOOGLEADSERVICES ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@WWW.GOOGLEADSERVICES[6].TXT [ /WWW.GOOGLEADSERVICES ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@WWW.TRACKFU[1].TXT [ /WWW.TRACKFU ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@YIELDMANAGER[1].TXT [ /YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\GUEST\COOKIES\GUEST@ZEDO[2].TXT [ /ZEDO ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\Y58XWRAQ ]
media.mtvnservices.com [ C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\Y58XWRAQ ]
media.scanscout.com [ C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\Y58XWRAQ ]
objects.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\Y58XWRAQ ]
udn.specificclick.net [ C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\Y58XWRAQ ]
video.redorbit.com [ C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\Y58XWRAQ ]
ad.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
cdn.eyewonder.com [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
cdn.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
media.movieweb.com [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
media.mtvnservices.com [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
media.scanscout.com [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
msnbcmedia.msn.com [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
objects.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
s0.2mdn.net [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
secure-uk.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
secure-us.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
tag.2bluemedia.hiro.tv [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
udn.specificclick.net [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
video.redorbit.com [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
webservices.evolvemediacorp.com [ C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\VNUJEM5F ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@A1.INTERCLICK[1].TXT [ /A1.INTERCLICK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@AD.360YIELD[1].TXT [ /AD.360YIELD ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@AD.DOUBLECLICK[1].TXT [ /AD.DOUBLECLICK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@AD.YIELDMANAGER[2].TXT [ /AD.YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@AD.YIELDMANAGER[3].TXT [ /AD.YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADBRITE[1].TXT [ /ADBRITE ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADINTERAX[2].TXT [ /ADINTERAX ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADJUGGLER[1].TXT [ /ADJUGGLER ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.ADDYNAMIX[1].TXT [ /ADS.ADDYNAMIX ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.ADK2[1].TXT [ /ADS.ADK2 ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.ADK2[3].TXT [ /ADS.ADK2 ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.BIGHEALTHTREE[1].TXT [ /ADS.BIGHEALTHTREE ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.BRIDGETRACK[1].TXT [ /ADS.BRIDGETRACK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.CPXADROIT[2].TXT [ /ADS.CPXADROIT ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.CREAFI[2].TXT [ /ADS.CREAFI ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.FINANCIALCONTENT[1].TXT [ /ADS.FINANCIALCONTENT ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.FOOTAR[2].TXT [ /ADS.FOOTAR ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.FOOTAR[3].TXT [ /ADS.FOOTAR ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.GAMERSMEDIA[2].TXT [ /ADS.GAMERSMEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.INTERGI[1].TXT [ /ADS.INTERGI ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.INTERGI[2].TXT [ /ADS.INTERGI ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.LYCOS[2].TXT [ /ADS.LYCOS ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.M80MARKETING[1].TXT [ /ADS.M80MARKETING ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.POINTROLL[1].TXT [ /ADS.POINTROLL ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.PUBMATIC[2].TXT [ /ADS.PUBMATIC ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.PUBMATIC[3].TXT [ /ADS.PUBMATIC ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.UNDERTONE[1].TXT [ /ADS.UNDERTONE ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADS.UNDERTONE[3].TXT [ /ADS.UNDERTONE ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADSERVER.ADTECHUS[1].TXT [ /ADSERVER.ADTECHUS ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADTECH[1].TXT [ /ADTECH ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADVERTISE[2].TXT [ /ADVERTISE ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADVERTISING[1].TXT [ /ADVERTISING ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADVERTISING[3].TXT [ /ADVERTISING ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ADXPOSE[1].TXT [ /ADXPOSE ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@AKAMAI.INTERCLICKPROXY[2].TXT [ /AKAMAI.INTERCLICKPROXY ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@AMAZON-ADSYSTEM[1].TXT [ /AMAZON-ADSYSTEM ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@APMEBF[2].TXT [ /APMEBF ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@AR.ATWOLA[1].TXT [ /AR.ATWOLA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@AT.ATWOLA[2].TXT [ /AT.ATWOLA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@AT.ATWOLA[3].TXT [ /AT.ATWOLA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ATDMT[2].TXT [ /ATDMT ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ATWOLA[2].TXT [ /ATWOLA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@BIZZCLICK[2].TXT [ /BIZZCLICK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@BIZZCLICK[3].TXT [ /BIZZCLICK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@BURSTNET[2].TXT [ /BURSTNET ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@CASALEMEDIA[2].TXT [ /CASALEMEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@CDN.JEMAMEDIA[1].TXT [ /CDN.JEMAMEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@CITI.BRIDGETRACK[2].TXT [ /CITI.BRIDGETRACK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@CLICK.SEARCHNATION[2].TXT [ /CLICK.SEARCHNATION ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@CLICKS.THESPECIALSEARCH[1].TXT [ /CLICKS.THESPECIALSEARCH ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@CLICKSOR[2].TXT [ /CLICKSOR ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@CLOVERLEAFADVERTISING[2].TXT [ /CLOVERLEAFADVERTISING ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@COLLECTIVE-MEDIA[1].TXT [ /COLLECTIVE-MEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@COLLECTIVE-MEDIA[3].TXT [ /COLLECTIVE-MEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@DC.TREMORMEDIA[1].TXT [ /DC.TREMORMEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@DOUBLECLICK[1].TXT [ /DOUBLECLICK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ECLICKZ[2].TXT [ /ECLICKZ ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ERO-ADVERTISING[1].TXT [ /ERO-ADVERTISING ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@FASTCLICK[2].TXT [ /FASTCLICK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@FIDELITY.ROTATOR.HADJ7.ADJUGGLER[1].TXT [ /FIDELITY.ROTATOR.HADJ7.ADJUGGLER ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@FILTER.PLUSFIND[1].TXT [ /FILTER.PLUSFIND ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@FINDSIMLE[1].TXT [ /FINDSIMLE ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@GOCLICKER[2].TXT [ /GOCLICKER ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@GOTACHA.ROTATOR.HADJ7.ADJUGGLER[1].TXT [ /GOTACHA.ROTATOR.HADJ7.ADJUGGLER ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@HARRENMEDIANETWORK[1].TXT [ /HARRENMEDIANETWORK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@IMRWORLDWIDE[2].TXT [ /IMRWORLDWIDE ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@INSIGHTEXPRESSAI[1].TXT [ /INSIGHTEXPRESSAI ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@INSIGHTEXPRESSAI[3].TXT [ /INSIGHTEXPRESSAI ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@INTERCLICK[1].TXT [ /INTERCLICK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@INTERCLICK[2].TXT [ /INTERCLICK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@INVITEMEDIA[1].TXT [ /INVITEMEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@INVITEMEDIA[3].TXT [ /INVITEMEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@LUCIDMEDIA[1].TXT [ /LUCIDMEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@MEDIA.ADFRONTIERS[2].TXT [ /MEDIA.ADFRONTIERS ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@MEDIA.ADFRONTIERS[3].TXT [ /MEDIA.ADFRONTIERS ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@MEDIA6DEGREES[2].TXT [ /MEDIA6DEGREES ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@MEDIAPLEX[1].TXT [ /MEDIAPLEX ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@MEDIAPLEX[2].TXT [ /MEDIAPLEX ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@MEDIATRAFFIC[1].TXT [ /MEDIATRAFFIC ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@MELLFIND[1].TXT [ /MELLFIND ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@MIVA.CINOMEDIA[1].TXT [ /MIVA.CINOMEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@MM.CHITIKA[2].TXT [ /MM.CHITIKA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@MY.ENVEROMEDIA[1].TXT [ /MY.ENVEROMEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@MYROITRACKING[1].TXT [ /MYROITRACKING ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@NETWORK.REALMEDIA[1].TXT [ /NETWORK.REALMEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@OX-D.FONDNESSMEDIA[2].TXT [ /OX-D.FONDNESSMEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@POINTROLL[2].TXT [ /POINTROLL ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@PORNHUB[2].TXT [ /PORNHUB ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@PRO-MARKET[2].TXT [ /PRO-MARKET ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@QUESTIONMARKET[2].TXT [ /QUESTIONMARKET ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@R1-ADS.ACE.ADVERTISING[1].TXT [ /R1-ADS.ACE.ADVERTISING ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@REALMEDIA[1].TXT [ /REALMEDIA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@REVSCI[1].TXT [ /REVSCI ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@RU4[1].TXT [ /RU4 ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@SERVEDBY.ADXSERVE[2].TXT [ /SERVEDBY.ADXSERVE ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@SERVING-SYS[1].TXT [ /SERVING-SYS ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@SERVING-SYS[3].TXT [ /SERVING-SYS ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@SPECIFICCLICK[1].TXT [ /SPECIFICCLICK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@SPECIFICCLICK[2].TXT [ /SPECIFICCLICK ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@STAT.ONESTAT[1].TXT [ /STAT.ONESTAT ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@STATCOUNTER[1].TXT [ /STATCOUNTER ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@T.POINTROLL[1].TXT [ /T.POINTROLL ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@TACODA.AT.ATWOLA[2].TXT [ /TACODA.AT.ATWOLA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@TRAFFICENGINE[2].TXT [ /TRAFFICENGINE ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@TRAFFICMP[2].TXT [ /TRAFFICMP ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@TRIBALFUSION[1].TXT [ /TRIBALFUSION ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@UIADSERVER[2].TXT [ /UIADSERVER ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@VIDASCO.ROTATOR.HADJ7.ADJUGGLER[2].TXT [ /VIDASCO.ROTATOR.HADJ7.ADJUGGLER ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@WEBORAMA[1].TXT [ /WEBORAMA ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@WEBSERVICES.EVOLVEMEDIACORP[1].TXT [ /WEBSERVICES.EVOLVEMEDIACORP ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@WWW.BURSTNET[1].TXT [ /WWW.BURSTNET ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@YIELDMANAGER[2].TXT [ /YIELDMANAGER ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@YOUNGBUCKS.ROTATOR.HADJ7.ADJUGGLER[1].TXT [ /YOUNGBUCKS.ROTATOR.HADJ7.ADJUGGLER ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ZEDO[1].TXT [ /ZEDO ]
C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\COOKIES\SYSTEM@ZEDO[2].TXT [ /ZEDO ]

Trojan.Agent/Gen-Alureon
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\TEMP\1AA.TMP

Adware.SanctionedMedia
C:\DOCUMENTS AND SETTINGS\ADMIN\LOCAL SETTINGS\TEMP\MCRAESWOXN.TMP

Trojan.Agent/Gen-FakeAV
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\17424164.EXE
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\HGOLESJJRNKDYMI.EXE
C:\DOCUMENTS AND SETTINGS\ERIKA\LOCAL SETTINGS\TEMP\JAR_CACHE2433428367871692700.TMP
C:\WINDOWS\TEMP\A7.TMP

Trojan.Agent/Gen-MalPE
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\NR1KPBJB.EXE
C:\WINDOWS\SYSTEM32\FC45X.COM
C:\WINDOWS\TEMP\BBYPAE\SETUP.EXE
C:\WINDOWS\TEMP\HKI4350.EXE

Trojan.Agent/Gen-FakePrivacy
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\PRIVACY.EXE
C:\WINDOWS\Prefetch\PRIVACY.EXE-20611DF9.pf

Trojan.Agent/Gen
C:\DOCUMENTS AND SETTINGS\ERIKA\LOCAL SETTINGS\TEMP\TMP334.TMP

Trojan.Agent/Gen-Zmozer
C:\WINDOWS\SYSTEM32\BLASBKUP.DLL

#9 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,416 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:08 PM

Posted 10 December 2011 - 10:42 PM

Great job!! Sorry had a bust day.. I was going ti say to leave off the sAS cookies section.. But alls good,
Pretty darn infected...
How are the pop ups?
I still want to do a couple things...

Please download MiniToolBox, save it to your desktop and run it.

Checkmark the following checkboxes:
  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.
  • List Minidump Files
Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.


>>>>

Please download TDSSKiller.zip and and extract it.
  • Run TDSSKiller.exe.
  • Click Start scan.
  • When it is finished the utility outputs a list of detected objects with description.
    The utility automatically selects an action (Cure or Delete) for malicious objects.
    The utility prompts the user to select an action to apply to suspicious objects (Skip, by default). Let the options as it is and click Continue
  • Let reboot if needed and tell me if the tool needed a reboot.
  • Click on Report and post the contents of the text file that will open.

    Note: By default, the utility outputs the log into system disk (it is usually the disk with installed operating system, C:\) root folder. The Log have a name like: TDSSKiller.Version_Date_Time_log.txt.


>>>>

1. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel.
2. Restart your computer (very important).
3. Download and run this utility. Mbam clean
4. It will ask to restart your computer (please allow it to).
5. After the computer restarts, install the latest version from here. http://www.malwarebytes.org/mbam-download.php
Note: You will need to reactivate the program using the license you were sent.
Note: If using Free version, ignore the part about putting in your license key and activating.
Launch the program and set the Protection and Registration.
Then go to the UPDATE tab if not done during installation and check for updates.
Restart the computer again and verify that MBAM is in the task tray and run a Quick Scan and post that log.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#10 blackwellbert

blackwellbert
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:08 PM

Posted 12 December 2011 - 10:48 PM

I ran minitools. MBAM.clean would not run. TDSSkill found and cured two root kits. I could not update MBAM, but ran it anyway with nothing being found

LOGS

MiniToolBox by Farbar
Ran by admin (administrator) on 12-12-2011 at 19:18:21
Microsoft Windows XP Professional Service Pack 3 (X86)

***************************************************************************

========================= Flush DNS: ===================================


Windows IP Configuration



Successfully flushed the DNS Resolver Cache.


========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

127.0.0.1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1001namen.com
127.0.0.1 1001namen.com
127.0.0.1 www.100888290cs.com
127.0.0.1 100888290cs.com

There are 13567 more lines starting with "127.0.0.1"

========================= IP Configuration: ================================

Intel® PRO/100 VE Network Connection = Local Area Connection (Connected)
The following helper DLL cannot be loaded: IFMON.DLL.
The following command was not found: int ip dump.


Windows IP Configuration



Host Name . . . . . . . . . . . . : AURELIA

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : satx.rr.com



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . : satx.rr.com

Description . . . . . . . . . . . : Intel® PRO/100 VE Network Connection

Physical Address. . . . . . . . . : 00-13-72-C5-02-51

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 10.0.1.7

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 10.0.1.1

DHCP Server . . . . . . . . . . . : 10.0.1.1

DNS Servers . . . . . . . . . . . : 192.168.0.1

Lease Obtained. . . . . . . . . . : Monday, December 12, 2011 7:09:16 PM

Lease Expires . . . . . . . . . . : Tuesday, December 13, 2011 7:09:16 PM

Ping request could not find host google.com. Please check the name and try again.

Ping request could not find host yahoo.com. Please check the name and try again.

Ping request could not find host bleepingcomputer.com. Please check the name and try again.



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 13 72 c5 02 51 ...... Intel® PRO/100 VE Network Connection - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.1.1 10.0.1.7 20
10.0.1.0 255.255.255.0 10.0.1.7 10.0.1.7 20
10.0.1.7 255.255.255.255 127.0.0.1 127.0.0.1 20
10.255.255.255 255.255.255.255 10.0.1.7 10.0.1.7 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
169.254.0.0 255.255.0.0 10.0.1.7 10.0.1.7 20
224.0.0.0 240.0.0.0 10.0.1.7 10.0.1.7 20
255.255.255.255 255.255.255.255 10.0.1.7 10.0.1.7 1
Default Gateway: 10.0.1.1
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 mswsock.dll [File Not found] ()
Catalog5 02 C:\Windows\System32\winrnr.dll [16896] (Microsoft Corporation)
Catalog5 03 mswsock.dll [File Not found] ()
Catalog5 04 C:\Program Files\Bonjour\mdnsNSP.dll [147456] (Apple Inc.)
Catalog5 05 C:\Windows\System32\nwprovau.dll [142336] (Microsoft Corporation)
Catalog9 01 mswsock.dll [File Not found] ()
Catalog9 02 mswsock.dll [File Not found] ()
Catalog9 03 mswsock.dll [File Not found] ()
Catalog9 04 mswsock.dll [File Not found] ()
Catalog9 05 mswsock.dll [File Not found] ()
Catalog9 06 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 11 mswsock.dll [File Not found] ()
Catalog9 12 mswsock.dll [File Not found] ()
Catalog9 13 mswsock.dll [File Not found] ()
Catalog9 14 mswsock.dll [File Not found] ()
Catalog9 15 mswsock.dll [File Not found] ()
Catalog9 16 mswsock.dll [File Not found] ()
Catalog9 17 mswsock.dll [File Not found] ()
Catalog9 18 mswsock.dll [File Not found] ()

========================= Event log errors: ===============================

Application errors:
==================
Error: (12/10/2011 04:12:40 PM) (Source: Application Hang) (User: )
Description: Hanging application mbam.exe, version 1.51.0.1118, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (12/10/2011 08:01:24 AM) (Source: Application Hang) (User: )
Description: Hanging application mbam.exe, version 1.51.0.1118, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Error: (12/09/2011 08:04:43 PM) (Source: LoadPerf) (User: )
Description: Installing the performance counter strings for service WmiApRpl (%2) failed. The
Error code is the first DWORD in Data section.

Error: (12/09/2011 08:04:43 PM) (Source: LoadPerf) (User: )
Description: Unable to update the performance counter strings of the 009 language ID.
The Win32 status returned by the call is the first DWORD in Data section.

Error: (12/09/2011 08:00:34 PM) (Source: Media Center Scheduler) (User: )
Description: Failed to write backup file.

Error: (12/09/2011 05:36:47 PM) (Source: LoadPerf) (User: )
Description: Installing the performance counter strings for service WmiApRpl (%2) failed. The
Error code is the first DWORD in Data section.

Error: (12/09/2011 05:36:47 PM) (Source: LoadPerf) (User: )
Description: Unable to update the performance counter strings of the 009 language ID.
The Win32 status returned by the call is the first DWORD in Data section.

Error: (12/09/2011 05:22:01 PM) (Source: Media Center Scheduler) (User: )
Description: Failed to write backup file.

Error: (12/04/2011 08:04:15 PM) (Source: Application Error) (User: )
Description: Faulting application ping.exe, version 5.1.2600.5512, faulting module mshtml.dll, version 8.0.6001.19088, fault address 0x000678d8.
Processing media-specific event for [ping.exe!ws!]

Error: (12/04/2011 07:34:26 PM) (Source: Application Error) (User: )
Description: Faulting application iexplore.exe, version 8.0.6001.18702, faulting module lplaypop.dll, version 1.0.0.1, fault address 0x000081fd.
Processing media-specific event for [iexplore.exe!ws!]


System errors:
=============
Error: (12/12/2011 07:37:42 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service terminated with the following error:
%%127

Error: (12/12/2011 07:36:32 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service terminated with the following error:
%%127

Error: (12/12/2011 07:35:34 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service terminated with the following error:
%%127

Error: (12/12/2011 07:34:32 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service terminated with the following error:
%%127

Error: (12/12/2011 07:33:38 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service terminated with the following error:
%%127

Error: (12/12/2011 07:32:32 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service terminated with the following error:
%%127

Error: (12/12/2011 07:31:32 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service terminated with the following error:
%%127

Error: (12/12/2011 07:30:38 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service terminated with the following error:
%%127

Error: (12/12/2011 07:29:31 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service terminated with the following error:
%%127

Error: (12/12/2011 07:28:32 PM) (Source: Service Control Manager) (User: )
Description: The Network Location Awareness (NLA) service terminated with the following error:
%%127


Microsoft Office Sessions:
=========================
Error: (12/10/2011 04:12:40 PM) (Source: Application Hang)(User: )
Description: mbam.exe1.51.0.1118hungapp0.0.0.000000000

Error: (12/10/2011 08:01:24 AM) (Source: Application Hang)(User: )
Description: mbam.exe1.51.0.1118hungapp0.0.0.000000000

Error: (12/09/2011 08:04:43 PM) (Source: LoadPerf)(User: )
Description: WmiApRpl

Error: (12/09/2011 08:04:43 PM) (Source: LoadPerf)(User: )
Description: 009

Error: (12/09/2011 08:00:34 PM) (Source: Media Center Scheduler)(User: )
Description: Failed to write backup file.

Error: (12/09/2011 05:36:47 PM) (Source: LoadPerf)(User: )
Description: WmiApRpl

Error: (12/09/2011 05:36:47 PM) (Source: LoadPerf)(User: )
Description: 009

Error: (12/09/2011 05:22:01 PM) (Source: Media Center Scheduler)(User: )
Description: Failed to write backup file.

Error: (12/04/2011 08:04:15 PM) (Source: Application Error)(User: )
Description: ping.exe5.1.2600.5512mshtml.dll8.0.6001.19088000678d8

Error: (12/04/2011 07:34:26 PM) (Source: Application Error)(User: )
Description: iexplore.exe8.0.6001.18702lplaypop.dll1.0.0.1000081fd


=========================== Installed Programs ============================

924PLC32 (Version: 1.0.0)
Adobe Flash Player 10 ActiveX (Version: 10.1.53.64)
Adobe Flash Player 10 Plugin (Version: 10.0.45.2)
Adobe Photoshop 7.0.1 (Version: 7.0.1)
Adobe Reader 7.0 (Version: 7.0.0)
Adobe Shockwave Player 11.5 (Version: 11.5.6.606)
AOL Coach Version 1.0(Build:20040229.1 en)
AOL Connectivity Services
AOL Uninstaller (Choose which Products to Remove)
AOLIcon (Version: 1.00.0000)
Apple Application Support (Version: 1.1.0)
Apple Mobile Device Support (Version: 2.6.0.32)
Apple Software Update (Version: 2.1.1.116)
Ask Toolbar (Version: 1.6.6.0)
ATI Control Panel (Version: 6.14.10.5160)
ATI Display Driver (Version: 8.162-050803a2-025672C-Dell)
AudibleManager
AVG Free 9.0
Bonjour (Version: 1.0.106)
Conexant D850 56K V.9x DFVc Modem
Corel Photo Album 6 (Version: 6.33)
Creative Mass Storage Drivers
Creative MediaSource (Version: 3.00)
Creative System Information
Creative Zen Nano Plus (Version: 1.0)
Dell CinePlayer (Version: 3.0)
Dell Digital Jukebox Driver
Dell Driver Reset Tool (Version: 1.02.0000)
Dell Photo AIO Printer 924
Dell System Restore (Version: 2.00.0000)
DellSupport (Version: 6.0.3062)
Digital Content Portal (Version: 1.00.0000)
Digital Line Detect (Version: 1.10)
DivX Setup (Version: 2.5.0.15)
Documentation & Support Launcher (Version: 1.00.0000)
Dynex mini card reader (Version: 2.01.04.04)
EarthLink setup files (Version: 2005.1.47.0)
EducateU (Version: 1.00.0000)
ELIcon (Version: 1.00.0000)
ERUNT 1.1j
ESET Online Scanner v3
ESPNMotion (Version: 2.1.6.0011)
freevideomaster Toolbar (Version: )
Games, Music, & Photos Launcher (Version: 1.00.0000)
GemMaster Mystic
Google Earth Plug-in (Version: 6.1.0.5001)
Google Update Helper (Version: 1.3.21.79)
High Definition Audio Driver Package - KB835221 (Version: 20040219.000000)
Intel® Graphics Media Accelerator Driver (Version: 6.14.10.4410)
Intel® PRO Network Connections Drivers
Intel® PROSet for Wired Connections (Version: 9.20.0000)
Internet Service Offers Launcher (Version: 1.00.0000)
iTunes (Version: 9.0.2.25)
Java Auto Updater (Version: 2.0.2.1)
Java™ 6 Update 20 (Version: 6.0.200)
Learn2 Player (Uninstall Only)
LimeWire 5.5.6 (Version: 5.5.6)
LivingPlay
Macromedia Shockwave Player
Malwarebytes' Anti-Malware version 1.51.2.1300 (Version: 1.51.2.1300)
McAfee Security Scan Plus (Version: 2.0.181.2)
MCU (Version: 1.00.0000)
Media Center Extender (Version: 2.3.0.0)
Microsoft .NET Framework 1.0 Hotfix (KB953295)
Microsoft .NET Framework 1.0 Hotfix (KB979904)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft Compression Client Pack 1.0 for Windows XP (Version: 1)
Microsoft Digital Image Library 9 - Blocker (Version: 9.00.0000)
Microsoft Digital Image Standard 2006 (Version: 11.0.0422)
Microsoft Digital Image Standard 2006 Editor (Version: 11.0.0422)
Microsoft Digital Image Standard 2006 Library (Version: 11.0.0422)
Microsoft Encarta Encyclopedia Standard 2006 (Version: 2006)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2006 (Version: 15)
Microsoft National Language Support Downlevel APIs
Microsoft Office XP Standard (Version: 10.0.2627.01)
Microsoft Plus! Digital Media Edition Installer (Version: 1.1.0.3514)
Microsoft Plus! Photo Story 2 LE (Version: 1.1.0.3463)
Microsoft Streets & Trips 2006 (Version: 13.00.09.0200)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Word 2002 (Version: 10.0.2627.01)
Microsoft Works (Version: 08.05.0818)
Microsoft Works Suite 2006 Setup Launcher
Microsoft Works Suite Add-in for Microsoft Word (Version: 8.0.0.0000)
Modem Helper (Version: 2.40)
Mozilla Firefox (3.6.3) (Version: 3.6.3 (en-US))
MSN
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB936181) (Version: 4.20.9848.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Musicmatch for Windows Media Player (Version: 0.00.000)
NetWaiting (Version: 2.5.12)
QuickTime (Version: 7.65.17.80)
RealPlayer Basic
Roxio DLA (Version: 5.2.0)
Roxio RecordNow Audio (Version: 2.0.4)
Roxio RecordNow Copy (Version: 2.0.4)
Roxio RecordNow Data (Version: 2.0.4)
Samsung New PC Studio (Version: 1.00.0000)
SAMSUNG USB Driver for Mobile Phones (Version: 1.3.650.0)
Sonic Activation Module (Version: 1.0)
Sonic Encoders (Version: 1.00)
Sonic Update Manager (Version: 3.0.0)
Spybot - Search & Destroy (Version: 1.6.2)
SpywareBlaster 4.2 (Version: 4.2.0)
SUPERAntiSpyware (Version: 5.0.1136)
The Sims 2 Nightlife
The Sims 2 Open For Business
Update Rollup 2 for Windows XP Media Center Edition 2005
VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0)
Viewpoint Media Player
VLC media player 1.0.1 (Version: 1.0.1)
Vuze
WeatherBug (Version: 6.8.2.0)
WebFldrs XP (Version: 9.50.7523)
Windows Genuine Advantage Notifications (KB905474) (Version: 1.5.0540.0)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7 (Version: 20070813.185237)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Media Connect
Windows Media Format 11 runtime
Windows Media Player 10 (Version: 9.00.3636)
Windows Media Player 10 Hotfix [See EmeraldQFE2 for more information]
Windows Media Player 11
Windows XP Media Center Edition 2005 KB2502898
Windows XP Media Center Edition 2005 KB905589
Windows XP Media Center Edition 2005 KB908246
Windows XP Media Center Edition 2005 KB925766
Windows XP Media Center Edition 2005 KB973768
Windows XP Service Pack 3 (Version: 20080414.031525)
Works Upgrade (Version: 8.0.0.0000)

========================= Memory info: ===================================

Percentage of memory in use: 74%
Total physical RAM: 1022.07 MB
Available physical RAM: 255.87 MB
Total Pagefile: 2460.72 MB
Available Pagefile: 1658.56 MB
Total Virtual: 2047.88 MB
Available Virtual: 1980.66 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:69.66 GB) (Free:6.23 GB) NTFS
3 Drive e: () (Removable) (Total:1.92 GB) (Free:0.33 GB) FAT

========================= Users: ========================================

User accounts for \\AURELIA

admin Administrator Bon Qui Qui
Colin Erika Guest
HelpAssistant MCX1 Noelle
SUPPORT_388945a0

========================= Minidump Files ==================================

C:\WINDOWS\Minidump\Mini020510-01.dmp
C:\WINDOWS\Minidump\Mini020510-02.dmp
C:\WINDOWS\Minidump\Mini032010-01.dmp
C:\WINDOWS\Minidump\Mini040110-01.dmp
C:\WINDOWS\Minidump\Mini040310-01.dmp
C:\WINDOWS\Minidump\Mini041511-01.dmp
C:\WINDOWS\Minidump\Mini050611-01.dmp
C:\WINDOWS\Minidump\Mini050811-01.dmp
C:\WINDOWS\Minidump\Mini052906-01.dmp
C:\WINDOWS\Minidump\Mini053006-01.dmp
C:\WINDOWS\Minidump\Mini070607-01.dmp
C:\WINDOWS\Minidump\Mini071306-01.dmp
C:\WINDOWS\Minidump\Mini080608-01.dmp
C:\WINDOWS\Minidump\Mini092411-01.dmp
C:\WINDOWS\Minidump\Mini092611-01.dmp
C:\WINDOWS\Minidump\Mini092711-01.dmp
C:\WINDOWS\Minidump\Mini100706-01.dmp
C:\WINDOWS\Minidump\Mini110406-01.dmp
C:\WINDOWS\Minidump\Mini112607-01.dmp
C:\WINDOWS\Minidump\Mini123107-01.dmp

**** End of log ****


19:43:38.0765 2460 TDSS rootkit removing tool 2.6.22.0 Dec 7 2011 13:21:06
19:43:40.0765 2460 ============================================================
19:43:40.0765 2460 Current date / time: 2011/12/12 19:43:40.0765
19:43:40.0765 2460 SystemInfo:
19:43:40.0765 2460
19:43:40.0765 2460 OS Version: 5.1.2600 ServicePack: 3.0
19:43:40.0765 2460 Product type: Workstation
19:43:40.0765 2460 ComputerName: AURELIA
19:43:40.0765 2460 UserName: admin
19:43:40.0765 2460 Windows directory: C:\WINDOWS
19:43:40.0765 2460 System windows directory: C:\WINDOWS
19:43:40.0765 2460 Processor architecture: Intel x86
19:43:40.0765 2460 Number of processors: 2
19:43:40.0765 2460 Page size: 0x1000
19:43:40.0765 2460 Boot type: Normal boot
19:43:40.0765 2460 ============================================================
19:43:45.0546 2460 Initialize success
19:44:20.0546 4552 ============================================================
19:44:20.0546 4552 Scan started
19:44:20.0546 4552 Mode: Manual;
19:44:20.0546 4552 ============================================================
19:44:22.0156 4552 Abiosdsk - ok
19:44:22.0234 4552 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS
19:44:22.0250 4552 abp480n5 - ok
19:44:22.0281 4552 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys
19:44:22.0296 4552 ACPI - ok
19:44:22.0359 4552 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys
19:44:22.0421 4552 ACPIEC - ok
19:44:22.0453 4552 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys
19:44:22.0484 4552 adpu160m - ok
19:44:22.0531 4552 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
19:44:22.0562 4552 aec - ok
19:44:22.0593 4552 AFD (355556d9e580915118cd7ef736653a89) C:\WINDOWS\System32\drivers\afd.sys
19:44:22.0609 4552 AFD - ok
19:44:22.0687 4552 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
19:44:22.0687 4552 agp440 - ok
19:44:22.0734 4552 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys
19:44:22.0828 4552 agpCPQ - ok
19:44:23.0000 4552 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys
19:44:23.0062 4552 Aha154x - ok
19:44:23.0078 4552 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys
19:44:23.0093 4552 aic78u2 - ok
19:44:23.0109 4552 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys
19:44:23.0109 4552 aic78xx - ok
19:44:23.0140 4552 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys
19:44:23.0140 4552 AliIde - ok
19:44:23.0156 4552 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys
19:44:23.0203 4552 alim1541 - ok
19:44:23.0359 4552 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys
19:44:23.0359 4552 amdagp - ok
19:44:23.0437 4552 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys
19:44:23.0437 4552 amsint - ok
19:44:23.0484 4552 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys
19:44:23.0484 4552 asc - ok
19:44:23.0500 4552 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys
19:44:23.0515 4552 asc3350p - ok
19:44:23.0531 4552 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys
19:44:23.0546 4552 asc3550 - ok
19:44:23.0562 4552 ASCTRM (d880831279ed91f9a4190a2db9539ea9) C:\WINDOWS\system32\drivers\ASCTRM.sys
19:44:23.0562 4552 ASCTRM - ok
19:44:23.0609 4552 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
19:44:23.0609 4552 AsyncMac - ok
19:44:23.0671 4552 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
19:44:23.0703 4552 atapi - ok
19:44:23.0750 4552 Atdisk - ok
19:44:23.0812 4552 ati2mtag (03621f7f968ff63713943405deb777f9) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
19:44:23.0890 4552 ati2mtag - ok
19:44:23.0921 4552 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
19:44:23.0937 4552 Atmarpc - ok
19:44:23.0984 4552 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
19:44:24.0000 4552 audstub - ok
19:44:24.0125 4552 AvgLdx86 (b8c187439d27aba430dd69fdcf1fa657) C:\WINDOWS\System32\Drivers\avgldx86.sys
19:44:24.0140 4552 AvgLdx86 - ok
19:44:24.0187 4552 AvgMfx86 (53b3f979930a786a614d29cafe99f645) C:\WINDOWS\System32\Drivers\avgmfx86.sys
19:44:24.0187 4552 AvgMfx86 - ok
19:44:24.0234 4552 AvgTdiX (9a7a93388f503a34e7339ae7f9997449) C:\WINDOWS\System32\Drivers\avgtdix.sys
19:44:24.0234 4552 AvgTdiX - ok
19:44:24.0265 4552 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
19:44:24.0265 4552 Beep - ok
19:44:24.0281 4552 bvrp_pci - ok
19:44:24.0390 4552 catchme - ok
19:44:24.0437 4552 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys
19:44:24.0437 4552 cbidf - ok
19:44:24.0453 4552 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
19:44:24.0453 4552 cbidf2k - ok
19:44:24.0468 4552 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys
19:44:24.0484 4552 cd20xrnt - ok
19:44:24.0500 4552 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
19:44:24.0562 4552 Cdaudio - ok
19:44:24.0609 4552 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
19:44:24.0609 4552 Cdfs - ok
19:44:24.0640 4552 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
19:44:24.0640 4552 Cdrom - ok
19:44:24.0656 4552 Changer - ok
19:44:24.0718 4552 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys
19:44:24.0718 4552 CmdIde - ok
19:44:24.0750 4552 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys
19:44:24.0765 4552 Cpqarray - ok
19:44:24.0781 4552 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys
19:44:24.0812 4552 dac2w2k - ok
19:44:24.0828 4552 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys
19:44:24.0828 4552 dac960nt - ok
19:44:24.0875 4552 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
19:44:24.0875 4552 Disk - ok
19:44:24.0921 4552 DLABOIOM (e2d0de31442390c35e3163c87cb6a9eb) C:\WINDOWS\system32\DLA\DLABOIOM.SYS
19:44:24.0937 4552 DLABOIOM - ok
19:44:24.0984 4552 DLACDBHM (d979bebcf7edcc9c9ee1857d1a68c67b) C:\WINDOWS\system32\Drivers\DLACDBHM.SYS
19:44:24.0984 4552 DLACDBHM - ok
19:44:25.0000 4552 DLADResN (83545593e297f50a8e2524b4c071a153) C:\WINDOWS\system32\DLA\DLADResN.SYS
19:44:25.0000 4552 DLADResN - ok
19:44:25.0015 4552 DLAIFS_M (96e01d901cdc98c7817155cc057001bf) C:\WINDOWS\system32\DLA\DLAIFS_M.SYS
19:44:25.0046 4552 DLAIFS_M - ok
19:44:25.0093 4552 DLAOPIOM (0a60a39cc5e767980a31ca5d7238dfa9) C:\WINDOWS\system32\DLA\DLAOPIOM.SYS
19:44:25.0093 4552 DLAOPIOM - ok
19:44:25.0125 4552 DLAPoolM (9fe2b72558fc808357f427fd83314375) C:\WINDOWS\system32\DLA\DLAPoolM.SYS
19:44:25.0125 4552 DLAPoolM - ok
19:44:25.0156 4552 DLARTL_N (7ee0852ae8907689df25049dcd2342e8) C:\WINDOWS\system32\Drivers\DLARTL_N.SYS
19:44:25.0156 4552 DLARTL_N - ok
19:44:25.0187 4552 DLAUDFAM (f08e1dafac457893399e03430a6a1397) C:\WINDOWS\system32\DLA\DLAUDFAM.SYS
19:44:25.0187 4552 DLAUDFAM - ok
19:44:25.0203 4552 DLAUDF_M (e7d105ed1e694449d444a9933df8e060) C:\WINDOWS\system32\DLA\DLAUDF_M.SYS
19:44:25.0218 4552 DLAUDF_M - ok
19:44:25.0265 4552 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys
19:44:25.0312 4552 dmboot - ok
19:44:25.0375 4552 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys
19:44:25.0375 4552 dmio - ok
19:44:25.0390 4552 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
19:44:25.0390 4552 dmload - ok
19:44:25.0406 4552 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
19:44:25.0406 4552 DMusic - ok
19:44:25.0453 4552 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys
19:44:25.0453 4552 dpti2o - ok
19:44:25.0484 4552 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
19:44:25.0484 4552 drmkaud - ok
19:44:25.0500 4552 DRVMCDB (fd0f95981fef9073659d8ec58e40aa3c) C:\WINDOWS\system32\Drivers\DRVMCDB.SYS
19:44:25.0500 4552 DRVMCDB - ok
19:44:25.0515 4552 DRVNDDM (b4869d320428cdc5ec4d7f5e808e99b5) C:\WINDOWS\system32\Drivers\DRVNDDM.SYS
19:44:25.0515 4552 DRVNDDM - ok
19:44:25.0656 4552 DSproct (413f2d5f9d802688242c23b38f767ecb) C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys
19:44:25.0671 4552 DSproct - ok
19:44:25.0734 4552 dsunidrv (dfeabb7cfffadea4a912ab95bdc3177a) C:\WINDOWS\system32\DRIVERS\dsunidrv.sys
19:44:25.0750 4552 dsunidrv - ok
19:44:25.0765 4552 E100B (95974e66d3de4951d29e28e8bc0b644c) C:\WINDOWS\system32\DRIVERS\e100b325.sys
19:44:25.0765 4552 E100B - ok
19:44:25.0812 4552 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
19:44:25.0812 4552 Fastfat - ok
19:44:25.0843 4552 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
19:44:25.0843 4552 Fdc - ok
19:44:25.0921 4552 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys
19:44:25.0921 4552 Fips - ok
19:44:25.0953 4552 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
19:44:25.0953 4552 Flpydisk - ok
19:44:25.0984 4552 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
19:44:26.0000 4552 FltMgr - ok
19:44:26.0078 4552 FsUsbExDisk (cbe5f69a5e5b918225f420ba748f3742) C:\WINDOWS\system32\FsUsbExDisk.SYS
19:44:26.0140 4552 FsUsbExDisk - ok
19:44:26.0203 4552 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
19:44:26.0218 4552 Fs_Rec - ok
19:44:26.0234 4552 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
19:44:26.0250 4552 Ftdisk - ok
19:44:26.0281 4552 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
19:44:26.0281 4552 GEARAspiWDM - ok
19:44:26.0296 4552 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
19:44:26.0312 4552 Gpc - ok
19:44:26.0328 4552 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
19:44:26.0328 4552 HDAudBus - ok
19:44:26.0343 4552 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
19:44:26.0343 4552 HidUsb - ok
19:44:26.0390 4552 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys
19:44:26.0390 4552 hpn - ok
19:44:26.0437 4552 HSFHWBS2 (77e4ff0b73bc0aeaaf39bf0c8104231f) C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys
19:44:26.0437 4552 HSFHWBS2 - ok
19:44:26.0515 4552 HSF_DP (60e1604729a15ef4a3b05f298427b3b1) C:\WINDOWS\system32\DRIVERS\HSF_DP.sys
19:44:26.0625 4552 HSF_DP - ok
19:44:26.0718 4552 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
19:44:26.0734 4552 HTTP - ok
19:44:26.0781 4552 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
19:44:26.0781 4552 i2omgmt - ok
19:44:26.0812 4552 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys
19:44:26.0812 4552 i2omp - ok
19:44:26.0921 4552 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
19:44:26.0937 4552 i8042prt - ok
19:44:27.0015 4552 ialm (5a8e05f1d5c36abd58cffa111eb325ea) C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
19:44:27.0062 4552 ialm - ok
19:44:27.0109 4552 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
19:44:27.0125 4552 Imapi - ok
19:44:27.0171 4552 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys
19:44:27.0171 4552 ini910u - ok
19:44:27.0203 4552 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys
19:44:27.0203 4552 IntelIde - ok
19:44:27.0234 4552 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys
19:44:27.0234 4552 intelppm - ok
19:44:27.0250 4552 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
19:44:27.0265 4552 Ip6Fw - ok
19:44:27.0296 4552 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
19:44:27.0296 4552 IpFilterDriver - ok
19:44:27.0328 4552 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
19:44:27.0328 4552 IpInIp - ok
19:44:27.0359 4552 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
19:44:27.0359 4552 IpNat - ok
19:44:27.0421 4552 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
19:44:27.0421 4552 IPSec - ok
19:44:27.0437 4552 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
19:44:27.0437 4552 IRENUM - ok
19:44:27.0453 4552 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
19:44:27.0453 4552 isapnp - ok
19:44:27.0500 4552 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
19:44:27.0515 4552 Kbdclass - ok
19:44:27.0640 4552 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
19:44:27.0703 4552 kbdhid - ok
19:44:27.0843 4552 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
19:44:27.0875 4552 kmixer - ok
19:44:27.0937 4552 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
19:44:27.0953 4552 KSecDD - ok
19:44:27.0968 4552 lbrtfdc - ok
19:44:28.0015 4552 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys
19:44:28.0015 4552 MBAMProtector - ok
19:44:28.0078 4552 mdmxsdk (eeaea6514ba7c9d273b5e87c4e1aab30) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
19:44:28.0078 4552 mdmxsdk - ok
19:44:28.0125 4552 MHNDRV (7f2f1d2815a6449d346fcccbc569fbd6) C:\WINDOWS\system32\DRIVERS\mhndrv.sys
19:44:28.0125 4552 MHNDRV - ok
19:44:28.0156 4552 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
19:44:28.0156 4552 mnmdd - ok
19:44:28.0187 4552 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys
19:44:28.0203 4552 Modem - ok
19:44:28.0203 4552 MODEMCSA (1992e0d143b09653ab0f9c5e04b0fd65) C:\WINDOWS\system32\drivers\MODEMCSA.sys
19:44:28.0218 4552 MODEMCSA - ok
19:44:28.0234 4552 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys
19:44:28.0234 4552 Mouclass - ok
19:44:28.0281 4552 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys
19:44:28.0328 4552 mouhid - ok
19:44:28.0343 4552 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
19:44:28.0343 4552 MountMgr - ok
19:44:28.0375 4552 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys
19:44:28.0375 4552 mraid35x - ok
19:44:28.0437 4552 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
19:44:28.0437 4552 MRxDAV - ok
19:44:28.0515 4552 MRxSmb (0dc719e9b15e902346e87e9dcd5751fa) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
19:44:28.0828 4552 MRxSmb - ok
19:44:29.0046 4552 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
19:44:29.0046 4552 Msfs - ok
19:44:29.0156 4552 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
19:44:29.0156 4552 MSKSSRV - ok
19:44:29.0218 4552 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
19:44:29.0328 4552 MSPCLOCK - ok
19:44:29.0359 4552 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
19:44:29.0375 4552 MSPQM - ok
19:44:29.0390 4552 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
19:44:29.0421 4552 mssmbios - ok
19:44:29.0484 4552 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
19:44:29.0500 4552 Mup - ok
19:44:29.0562 4552 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
19:44:29.0609 4552 NDIS - ok
19:44:29.0734 4552 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
19:44:29.0750 4552 NdisTapi - ok
19:44:29.0859 4552 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
19:44:29.0859 4552 Ndisuio - ok
19:44:29.0937 4552 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
19:44:29.0937 4552 NdisWan - ok
19:44:30.0000 4552 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
19:44:30.0000 4552 NDProxy - ok
19:44:30.0031 4552 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
19:44:30.0078 4552 NetBIOS - ok
19:44:30.0093 4552 NetBT (b8a8b453e8ae33a1bfb26290be44989a) C:\WINDOWS\system32\DRIVERS\netbt.sys
19:44:30.0171 4552 NetBT ( Rootkit.Win32.ZAccess.j ) - infected
19:44:30.0171 4552 NetBT - detected Rootkit.Win32.ZAccess.j (0)
19:44:30.0218 4552 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
19:44:30.0218 4552 Npfs - ok
19:44:30.0328 4552 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
19:44:30.0359 4552 Ntfs - ok
19:44:30.0375 4552 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
19:44:30.0390 4552 Null - ok
19:44:30.0484 4552 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
19:44:30.0546 4552 nv - ok
19:44:30.0593 4552 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
19:44:30.0609 4552 NwlnkFlt - ok
19:44:30.0718 4552 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
19:44:30.0718 4552 NwlnkFwd - ok
19:44:30.0765 4552 NwlnkIpx (8b8b1be2dba4025da6786c645f77f123) C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys
19:44:30.0765 4552 NwlnkIpx - ok
19:44:30.0781 4552 NwlnkNb (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS\system32\DRIVERS\nwlnknb.sys
19:44:30.0781 4552 NwlnkNb - ok
19:44:30.0812 4552 NwlnkSpx (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys
19:44:30.0843 4552 NwlnkSpx - ok
19:44:30.0875 4552 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys
19:44:30.0875 4552 Parport - ok
19:44:30.0906 4552 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
19:44:30.0968 4552 PartMgr - ok
19:44:31.0000 4552 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys
19:44:31.0000 4552 ParVdm - ok
19:44:31.0031 4552 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys
19:44:31.0031 4552 PCI - ok
19:44:31.0046 4552 PCIDump - ok
19:44:31.0062 4552 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys
19:44:31.0062 4552 PCIIde - ok
19:44:31.0109 4552 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys
19:44:31.0109 4552 Pcmcia - ok
19:44:31.0125 4552 PDCOMP - ok
19:44:31.0140 4552 PDFRAME - ok
19:44:31.0156 4552 PDRELI - ok
19:44:31.0156 4552 PDRFRAME - ok
19:44:31.0187 4552 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys
19:44:31.0187 4552 perc2 - ok
19:44:31.0218 4552 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys
19:44:31.0218 4552 perc2hib - ok
19:44:31.0281 4552 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
19:44:31.0281 4552 PptpMiniport - ok
19:44:31.0296 4552 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
19:44:31.0328 4552 PSched - ok
19:44:31.0359 4552 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
19:44:31.0375 4552 Ptilink - ok
19:44:31.0421 4552 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys
19:44:31.0437 4552 PxHelp20 - ok
19:44:31.0500 4552 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys
19:44:31.0515 4552 ql1080 - ok
19:44:31.0609 4552 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys
19:44:31.0609 4552 Ql10wnt - ok
19:44:31.0671 4552 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys
19:44:31.0671 4552 ql12160 - ok
19:44:31.0687 4552 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys
19:44:31.0687 4552 ql1240 - ok
19:44:31.0718 4552 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys
19:44:31.0718 4552 ql1280 - ok
19:44:31.0750 4552 QWAVEDRV (2bb1d2baf3493362e5c1949c5f210d5f) C:\WINDOWS\system32\DRIVERS\qwavedrv.sys
19:44:31.0750 4552 QWAVEDRV - ok
19:44:31.0765 4552 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
19:44:31.0781 4552 RasAcd - ok
19:44:31.0828 4552 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
19:44:31.0828 4552 Rasl2tp - ok
19:44:31.0921 4552 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
19:44:31.0921 4552 RasPppoe - ok
19:44:31.0968 4552 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
19:44:31.0984 4552 Raspti - ok
19:44:32.0031 4552 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
19:44:32.0046 4552 Rdbss - ok
19:44:32.0078 4552 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
19:44:32.0093 4552 RDPCDD - ok
19:44:32.0140 4552 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
19:44:32.0156 4552 rdpdr - ok
19:44:32.0234 4552 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys
19:44:32.0234 4552 RDPWD - ok
19:44:32.0281 4552 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys
19:44:32.0281 4552 redbook - ok
19:44:32.0453 4552 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
19:44:32.0531 4552 SASDIFSV - ok
19:44:32.0562 4552 SASENUM (7ce61c25c159f50f9eaf6d77fc83fa35) C:\Program Files\SUPERAntiSpyware\SASENUM.SYS
19:44:32.0562 4552 SASENUM - ok
19:44:32.0625 4552 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
19:44:32.0703 4552 SASKUTIL - ok
19:44:32.0796 4552 SbcpHid (aaf28ab6effd8990bfe20398e92f101e) C:\WINDOWS\system32\Drivers\SbcpHid.sys
19:44:32.0812 4552 SbcpHid - ok
19:44:32.0875 4552 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
19:44:32.0890 4552 Secdrv - ok
19:44:32.0937 4552 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
19:44:32.0937 4552 serenum - ok
19:44:32.0968 4552 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys
19:44:32.0984 4552 Serial - ok
19:44:33.0031 4552 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
19:44:33.0031 4552 Sfloppy - ok
19:44:33.0046 4552 Simbad - ok
19:44:33.0093 4552 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys
19:44:33.0093 4552 sisagp - ok
19:44:33.0093 4552 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys
19:44:33.0109 4552 Sparrow - ok
19:44:33.0140 4552 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
19:44:33.0140 4552 splitter - ok
19:44:33.0156 4552 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys
19:44:33.0171 4552 sr - ok
19:44:33.0250 4552 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
19:44:33.0281 4552 Srv - ok
19:44:33.0375 4552 STHDA (2a2dc39623adef8ab3703ab9fac4b440) C:\WINDOWS\system32\drivers\sthda.sys
19:44:33.0406 4552 STHDA - ok
19:44:33.0453 4552 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
19:44:33.0468 4552 swenum - ok
19:44:33.0515 4552 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
19:44:33.0515 4552 swmidi - ok
19:44:33.0718 4552 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys
19:44:33.0734 4552 symc810 - ok
19:44:33.0796 4552 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys
19:44:33.0828 4552 symc8xx - ok
19:44:33.0859 4552 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys
19:44:33.0859 4552 sym_hi - ok
19:44:33.0937 4552 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys
19:44:33.0953 4552 sym_u3 - ok
19:44:33.0984 4552 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
19:44:33.0984 4552 sysaudio - ok
19:44:34.0062 4552 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
19:44:34.0109 4552 Tcpip - ok
19:44:34.0156 4552 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
19:44:34.0156 4552 TDPIPE - ok
19:44:34.0203 4552 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
19:44:34.0234 4552 TDTCP - ok
19:44:34.0375 4552 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
19:44:34.0406 4552 TermDD - ok
19:44:34.0921 4552 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys
19:44:34.0984 4552 TosIde - ok
19:44:35.0218 4552 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
19:44:35.0250 4552 Udfs - ok
19:44:35.0578 4552 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys
19:44:35.0593 4552 ultra - ok
19:44:35.0796 4552 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
19:44:35.0937 4552 Update - ok
19:44:36.0140 4552 USBAAPL (1df89c499bf45d878b87ebd4421d462d) C:\WINDOWS\system32\Drivers\usbaapl.sys
19:44:36.0156 4552 USBAAPL - ok
19:44:36.0265 4552 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
19:44:36.0296 4552 usbccgp - ok
19:44:36.0312 4552 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
19:44:36.0312 4552 usbehci - ok
19:44:36.0343 4552 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
19:44:36.0343 4552 usbhub - ok
19:44:36.0406 4552 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
19:44:36.0406 4552 usbprint - ok
19:44:36.0437 4552 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
19:44:36.0468 4552 usbscan - ok
19:44:36.0656 4552 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
19:44:36.0687 4552 USBSTOR - ok
19:44:36.0781 4552 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
19:44:36.0796 4552 usbuhci - ok
19:44:36.0953 4552 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
19:44:37.0015 4552 VgaSave - ok
19:44:37.0265 4552 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
19:44:37.0281 4552 viaagp - ok
19:44:37.0343 4552 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
19:44:37.0390 4552 ViaIde - ok
19:44:37.0687 4552 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys
19:44:37.0718 4552 VolSnap - ok
19:44:37.0984 4552 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
19:44:38.0000 4552 Wanarp - ok
19:44:38.0203 4552 wanatw (0a716c08cb13c3a8f4f51e882dbf7416) C:\WINDOWS\system32\DRIVERS\wanatw4.sys
19:44:38.0203 4552 wanatw - ok
19:44:38.0437 4552 WDICA - ok
19:44:38.0781 4552 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
19:44:38.0796 4552 wdmaud - ok
19:44:39.0046 4552 winachsf (f59ed5a43b988a18ef582bb07b2327a7) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
19:44:39.0062 4552 winachsf - ok
19:44:39.0156 4552 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
19:44:39.0171 4552 WS2IFSL - ok
19:44:39.0250 4552 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
19:44:39.0250 4552 WudfPf - ok
19:44:39.0609 4552 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
19:44:39.0671 4552 WudfRd - ok
19:44:39.0703 4552 MBR (0x1B8) (928373674867a2875576c335333e620f) \Device\Harddisk0\DR0
19:44:39.0703 4552 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - infected
19:44:39.0703 4552 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Pihar.b (0)
19:44:39.0718 4552 MBR (0x1B8) (671b81004fdd1588fa9ed1331c9ceca9) \Device\Harddisk1\DR4
19:44:53.0671 4552 \Device\Harddisk1\DR4 - ok
19:44:53.0703 4552 Boot (0x1200) (75fc9a7083b3f7897e14bd8fb51af6bd) \Device\Harddisk0\DR0\Partition0
19:44:53.0734 4552 \Device\Harddisk0\DR0\Partition0 - ok
19:44:53.0734 4552 Boot (0x1200) (99906017c3022f040d4bc0bda27f721d) \Device\Harddisk1\DR4\Partition0
19:44:53.0734 4552 \Device\Harddisk1\DR4\Partition0 - ok
19:44:53.0734 4552 ============================================================
19:44:53.0734 4552 Scan finished
19:44:53.0734 4552 ============================================================
19:44:53.0843 5836 Detected object count: 2
19:44:53.0843 5836 Actual detected object count: 2
19:48:23.0375 5836 VerifyFileNameVersionInfo: GetFileVersionInfoSizeW(C:\WINDOWS\system32\drivers\netbt.sys) error 1813
19:48:35.0937 5836 Backup copy found, using it..
19:48:36.0015 5836 C:\WINDOWS\system32\DRIVERS\netbt.sys - will be cured on reboot
19:48:44.0843 5836 NetBT ( Rootkit.Win32.ZAccess.j ) - User select action: Cure
19:48:45.0031 5836 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - will be cured on reboot
19:48:45.0062 5836 \Device\Harddisk0\DR0 - ok
19:48:45.0062 5836 \Device\Harddisk0\DR0 ( Rootkit.Boot.Pihar.b ) - User select action: Cure
19:49:04.0921 4580 Deinitialize success

#11 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,416 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:08 PM

Posted 13 December 2011 - 02:27 PM

Hello again blackwellbert
A couple things and then we will mop up.

Please rerun TDSS to be sure the rootkit is gone.

I'd like us to scan your machine with ESET OnlineScan
  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on Posted Image to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image icon on your desktop.
  • Check Posted Image
  • Click the Posted Image button.
  • Accept any security warnings from your browser.
  • Under scan settings, check Posted Image and check Remove found threats
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push Posted Image
  • Push Posted Image, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the Posted Image button.
  • Push Posted Image


NOTE: In some instances if no malware is found there will be no log produced.


Rerun MBAM (MalwareBytes) like this:

Open MBAM in normal mode and click Update tab, select Check for Updates,when done
click Scanner tab,select FULL scan and scan (normal mode).
After scan click Remove Selected, Post new scan log and Reboot into normal mode.

Please ask any needed questions,post logs and Let us know how the PC is running now.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#12 blackwellbert

blackwellbert
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:08 PM

Posted 13 December 2011 - 06:34 PM

I have already run ESET and I can't update MBAM. I can't connect to internet even though the physical connection is good. I have been d. l. files to my flash drive from a different computer and transferring to infected computer. Last night when I ran MBAM w/o update, no threats were detected. How do I unblock my internet? I have checked and reset IE and FF proxy settings several times--to no avail. I know my physical connection is good b/c I can see infected comp. on my LAN. I think a different approach is necessary b/c I am not progressing with this fix. How about Combo Fix or OTL or GMER? Can those help me in this situation?

Edited by blackwellbert, 13 December 2011 - 06:35 PM.


#13 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,416 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:08 PM

Posted 13 December 2011 - 08:57 PM

For the connection try these...

Please click Start > Run, type inetcpl.cpl in the runbox and press enter.
Click the Connections tab and click the LAN settings option.
Verify if "Use a proxy..." is checked, if so, UNcheck it and click OK/OK to exit.
Now check if the internet is working again.

OR

Go to Start ... Run and type in cmd
A dos Window will appear.
Type in the dos window: netsh winsock reset
Click on the enter key.

Reboot your system to complete the process.

If needed : type these one line at a time, press enter after each line. See if it works after each.


netsh interface ipv4 reset
netsh interface ipv6 reset
ipconfig /flushdns


WIN7.. Please Download this file, Click Me
Right-click on winsockfix.bat and click on Run as Administrator.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#14 blackwellbert

blackwellbert
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:08 PM

Posted 17 December 2011 - 11:35 AM

Internet access reagained. MBAM updated and run. ESET run also. Every time I run a new scan, more infections show up. How can I be sure that all infections are gone? I have installed Ad-Aware, SpywareBlaster and SpyBot S&D. What else can I do? Thanks for your help so far!



Latest ESET log (12-17-11) shows 2 trojans:

C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP10\A0001009.exe a variant of Win32/Agent.SZW trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP10\A0001730.exe a variant of Win32/Agent.SZW trojan cleaned by deleting - quarantined

Previous ESET log:

C:\Documents and Settings\admin\Application Data\Mozilla\Firefox\Profiles\efv2aifh.default\extensions\{d8116b56-6a9f-4f71-be17-77f131e2f9a1}\chrome\xulcache.jar JS/Agent.NDO trojan cleaned by deleting - quarantined
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\k04fmq41.default\extensions\{d8116b56-6a9f-4f71-be17-77f131e2f9a1}\chrome\xulcache.jar JS/Agent.NDO trojan cleaned by deleting - quarantined
C:\Documents and Settings\Colin\Application Data\Mozilla\Firefox\Profiles\zjnpbt67.default\extensions\{d8116b56-6a9f-4f71-be17-77f131e2f9a1}\chrome\xulcache.jar JS/Agent.NDO trojan cleaned by deleting - quarantined
C:\Documents and Settings\Erika\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\textlinks@lplay.com\components\lptlf.dll a variant of Win32/Adware.Gamevance.BH application cleaned by deleting - quarantined
C:\Documents and Settings\Erika\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\textlinks@lplay.com\components\lptlf.dll.tmp a variant of Win32/Adware.Gamevance.BH application cleaned by deleting - quarantined
C:\Documents and Settings\Erika\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\textlinks@lplay.com\components\lptlf2.dll a variant of Win32/Adware.Gamevance.BH application cleaned by deleting - quarantined
C:\Documents and Settings\Erika\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\textlinks@lplay.com\components\lptlf2.dll.tmp a variant of Win32/Adware.Gamevance.BH application cleaned by deleting - quarantined
C:\Documents and Settings\Erika\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\textlinks@lplay.com\components\lptlf3.dll a variant of Win32/Adware.Gamevance.BH application cleaned by deleting - quarantined
C:\Documents and Settings\Erika\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\textlinks@lplay.com\components\lptlf3.dll.tmp a variant of Win32/Adware.Gamevance.BH application cleaned by deleting - quarantined
C:\Documents and Settings\Erika\Application Data\Mozilla\Firefox\Profiles\yi7tk6v8.default\extensions\{d8116b56-6a9f-4f71-be17-77f131e2f9a1}\chrome\xulcache.jar JS/Agent.NDO trojan cleaned by deleting - quarantined
C:\Documents and Settings\Erika\Application Data\Sun\Java\Deployment\cache\6.0\0\43296140-6c82e946 a variant of Java/TrojanDownloader.Agent.ME trojan cleaned by deleting - quarantined
C:\Documents and Settings\Erika\Local Settings\Application Data\Mozilla\Firefox\Profiles\yi7tk6v8.default\Cache\B47D5CF5d01 JS/Kryptik.BB trojan cleaned by deleting - quarantined
C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\nlxmivl5.default\extensions\{d8116b56-6a9f-4f71-be17-77f131e2f9a1}\chrome\xulcache.jar JS/Agent.NDO trojan cleaned by deleting - quarantined
C:\Documents and Settings\Guest\Local Settings\Temporary Internet Files\Content.IE5\YNIQOMXH\slider[1].aspx HTML/Iframe.B.Gen virus deleted - quarantined
C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\s0nfn3md.default\extensions\{d8116b56-6a9f-4f71-be17-77f131e2f9a1}\chrome\xulcache.jar JS/Agent.NDO trojan cleaned by deleting - quarantined
C:\Program Files\LivingPlay\lplayun.exe a variant of Win32/Adware.Gamevance.BE application cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000003.sys a variant of Win32/Rootkit.Kryptik.EX trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000037.sys a variant of Win32/Rootkit.Kryptik.EX trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000061.dll a variant of Win32/Adware.Gamevance.BD application cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000063.dll a variant of Win32/Kryptik.UQZ trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000064.dll a variant of Win32/Kryptik.UQZ trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000065.dll a variant of Win32/Kryptik.UQZ trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000066.dll a variant of Win32/Kryptik.UQZ trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000067.dll a variant of Win32/Kryptik.UQZ trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000068.dll a variant of Win32/Kryptik.UQZ trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000071.exe a variant of Win32/Kryptik.WOI trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000073.sys a variant of Win32/Rootkit.Kryptik.EX trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000075.dll a variant of Win32/Kryptik.UPJ trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000123.sys a variant of Win32/Rootkit.Kryptik.EX trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000155.sys a variant of Win32/Rootkit.Kryptik.EX trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000176.exe a variant of Win32/Adware.Gamevance.BE application cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000177.exe a variant of Win32/Adware.Gamevance.BE application cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000184.dll a variant of Win32/Adware.180Solutions application cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP0\A0000189.sys a variant of Win32/Rootkit.Kryptik.EX trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1\A0000259.sys a variant of Win32/Rootkit.Kryptik.EX trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1\A0000291.sys a variant of Win32/Rootkit.Kryptik.EX trojan cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP6\A0000707.dll a variant of Win32/Adware.Gamevance.BH application cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP6\A0000708.dll a variant of Win32/Adware.Gamevance.BH application cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP6\A0000709.dll a variant of Win32/Adware.Gamevance.BH application cleaned by deleting - quarantined
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP6\A0000710.exe a variant of Win32/Adware.Gamevance.BE application cleaned by deleting - quarantined


MBAM Log

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 8377

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

12/15/2011 9:40:04 PM
mbam-log-2011-12-15 (21-40-04).txt

Scan type: Quick scan
Objects scanned: 313988
Time elapsed: 3 hour(s), 1 minute(s), 37 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 7

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
c:\documents and settings\admin\application data\Remote\hcocd.dll (Spyware.Password) -> Delete on reboot.

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{DEF354E9-6324-46A4-A166-63B3F65A0C60} (Spyware.Password) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{DEF354E9-6324-46A4-A166-63B3F65A0C60} (Spyware.Password) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\documents and settings\admin\application data\Remote\hcocd.dll (Spyware.Password) -> Delete on reboot.
c:\documents and settings\all users\application data\nr1kpbjb.exe_ (Trojan.Email) -> Quarantined and deleted successfully.
c:\RECYCLER\s-1-5-21-303941951-797862188-4109352829-1011\Dc34.exe (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\documents and settings\admin\local settings\temp\thpm3990509841008016302.tmp (Trojan.Exploit.Drop.THPM) -> Quarantined and deleted successfully.
c:\documents and settings\all users\Desktop\privacy protection.lnk (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\admin\local settings\temp\thpm2792378359290837771.tmp (Exploit.Drop.3) -> Quarantined and deleted successfully.
c:\documents and settings\admin\local settings\temp\thpm5556381173104106126.tmp (Exploit.Drop.3) -> Quarantined and deleted successfully.

AD-Aware log

Logfile created: 12/16/2011 19:22:36
Ad-Aware version: 9.6.0
Extended engine: 3
Extended engine version: 3.1.2770
User performing scan: admin

*********************** Definitions database information ***********************
Lavasoft definition file: 150.652
Genotype definition file version: 2011/09/21 13:56:01
Extended engine definition file: 11264.0

******************************** Scan results: *********************************
Scan profile name: Full Scan (ID: full)
Objects scanned: 290962
Objects detected: 41


Type Detected
==========================
Processes.......: 0
Registry entries: 0
Hostfile entries: 0
Files...........: 7
Folders.........: 0
LSPs............: 0
Cookies.........: 34
Browser hijacks.: 0
MRU objects.....: 0



Skipped items:
Description: c:\documents and settings\erika\my documents\downloads\ilividsetupv1.exe Family Name: Win32.PUP.Bandoo[800] Engine: 1 Clean status: Success Item ID: 0 Family ID: 0 MD5: 8ee6b8ea754503466cf29fe6187b5107
Description: c:\system volume information\_restore{129201fa-b0ac-49b3-96b2-deb8b91e727b}\rp8\a0000820.exe Family Name: Win32.PUP.Bandoo[800] Engine: 1 Clean status: Success Item ID: 0 Family ID: 0 MD5: 8ee6b8ea754503466cf29fe6187b5107

Removed items:
Description: www.new* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409109 Family ID: 0
Description: *.lycos* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408930 Family ID: 0
Description: *2o7* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408943 Family ID: 0
Description: *tribalfusion* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408785 Family ID: 0
Description: *atdmt* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408910 Family ID: 0
Description: *apmebf* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409163 Family ID: 0
Description: *clickbank* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408890 Family ID: 0
Description: *pointroll* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408826 Family ID: 0
Description: *ads.pointroll* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408927 Family ID: 0
Description: *ad.yieldmanager* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409172 Family ID: 0
Description: *insightexpressai* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409259 Family ID: 0
Description: *specificclick* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408807 Family ID: 0
Description: *addynamix* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409026 Family ID: 0
Description: *pointroll* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408826 Family ID: 0
Description: *ads.pointroll* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408927 Family ID: 0
Description: *specificclick* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408807 Family ID: 0
Description: *doubleclick* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408875 Family ID: 0
Description: *hitbox* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408858 Family ID: 0
Description: *.hitbox* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409072 Family ID: 0
Description: *insightexpressai* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409259 Family ID: 0
Description: *realmedia* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409139 Family ID: 0
Description: *klo* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408848 Family ID: 0
Description: *372* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408942 Family ID: 0
Description: *276* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408944 Family ID: 0
Description: *engage* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409004 Family ID: 0
Description: *overstock* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409142 Family ID: 0
Description: *unicast* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409281 Family ID: 0
Description: *.lycos* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408930 Family ID: 0
Description: *boldchat* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409211 Family ID: 0
Description: *adserv* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408921 Family ID: 0
Description: *adserver* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408737 Family ID: 0
Description: *adserv* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 408921 Family ID: 0
Description: *adtech* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409018 Family ID: 0
Description: *adserve* Family Name: Cookies Engine: 1 Clean status: Success Item ID: 409020 Family ID: 0

Quarantined items:
Description: c:\documents and settings\admin\my documents\downloads\combofix.exe Family Name: FraudTool.Win32.FakeSpyPro Engine: 3 Clean status: Success Item ID: 1 Family ID: 0 MD5: eac63b84239141f8fbfa2cca9b3c8477
Description: c:\documents and settings\colin\desktop\rkill.com Family Name: Trojan.FakeAlert (fs) Engine: 3 Clean status: Success Item ID: 2 Family ID: 0 MD5: 3252d582cdcd3ad154cf097faf3622da
Description: c:\documents and settings\noelle\local settings\tempimages\checknewversion.exe Family Name: Trojan.Win32.Generic!BT Engine: 3 Clean status: Success Item ID: 3 Family ID: 0 MD5: f5febda633a2c5ce6b2a6f119a321c05
Description: c:\documents and settings\noelle\my documents\downloads\otl.exe Family Name: Trojan.Win32.Generic!BT Engine: 3 Clean status: Success Item ID: 3 Family ID: 0 MD5: 779e1d20e698c68489684fb89ed78d88
Description: c:\_otl\movedfiles\04162010_235216\c_documents and settings\noelle\local settings\application data\{02c7a0ec-d36a-47c9-970a-09ad79f25515}\chrome\content\overlay.xul Family Name: Trojan.JS.Generic (v) Engine: 3 Clean status: Success Item ID: 4 Family ID: 0 MD5: 5727aee90668a831a69bb3d048e89947

Scan and cleaning complete: Finished correctly after 14072 seconds

*********************************** Settings ***********************************

Scan profile:
ID: full, enabled:1, value: Full Scan
ID: folderstoscan, enabled:1, value: C:\
ID: useantivirus, enabled:1, value: true
ID: sections, enabled:1
ID: scancriticalareas, enabled:1, value: true
ID: scanrunningapps, enabled:1, value: true
ID: scanregistry, enabled:1, value: true
ID: scanlsp, enabled:1, value: true
ID: scanads, enabled:1, value: true
ID: scanhostsfile, enabled:1, value: true
ID: scanmru, enabled:1, value: true
ID: scanbrowserhijacks, enabled:1, value: true
ID: scantrackingcookies, enabled:1, value: true
ID: closebrowsers, enabled:1, value: false
ID: filescanningoptions, enabled:1
ID: archives, enabled:1, value: true
ID: onlyexecutables, enabled:1, value: false
ID: skiplargerthan, enabled:1, value: 20480
ID: scanrootkits, enabled:1, value: true
ID: rootkitlevel, enabled:1, value: mild, domain: medium,mild,strict
ID: usespywareheuristics, enabled:1, value: true

Scan global:
ID: global, enabled:1
ID: addtocontextmenu, enabled:1, value: true
ID: playsoundoninfection, enabled:1, value: false
ID: soundfile, enabled:0, value: N/A

Scheduled scan settings:
<Empty>

Update settings:
ID: updates, enabled:1
ID: launchthreatworksafterscan, enabled:1, value: off, domain: normal,off,silently
ID: deffiles, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
ID: licenseandinfo, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall
ID: schedules, enabled:1, value: true
ID: updatedaily1, enabled:1, value: Daily 1
ID: time, enabled:1, value: Fri Dec 16 19:19:00 2011
ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: false
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: false
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false
ID: updatedaily2, enabled:1, value: Daily 2
ID: time, enabled:1, value: Fri Dec 16 01:19:00 2011
ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: false
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: false
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false
ID: updatedaily3, enabled:1, value: Daily 3
ID: time, enabled:1, value: Fri Dec 16 07:19:00 2011
ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: false
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: false
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false
ID: updatedaily4, enabled:1, value: Daily 4
ID: time, enabled:1, value: Fri Dec 16 13:19:00 2011
ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: false
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: false
ID: friday, enabled:1, value: false
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false
ID: updateweekly1, enabled:1, value: Weekly
ID: time, enabled:1, value: Fri Dec 16 19:19:00 2011
ID: frequency, enabled:1, value: weekly, domain: daily,monthly,once,systemstart,weekly
ID: weekdays, enabled:1
ID: monday, enabled:1, value: true
ID: tuesday, enabled:1, value: false
ID: wednesday, enabled:1, value: false
ID: thursday, enabled:1, value: false
ID: friday, enabled:1, value: true
ID: saturday, enabled:1, value: false
ID: sunday, enabled:1, value: false
ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31
ID: scanprofile, enabled:1, value:
ID: auto_deal_with_infections, enabled:1, value: false

Appearance settings:
ID: appearance, enabled:1
ID: skin, enabled:1, value: default.egl, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Resource
ID: showtrayicon, enabled:1, value: true
ID: autoentertainmentmode, enabled:1, value: true
ID: guimode, enabled:1, value: mode_simple, domain: mode_advanced,mode_simple
ID: language, enabled:1, value: en, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Language

Realtime protection settings:
ID: realtime, enabled:1
ID: layers, enabled:1
ID: useantivirus, enabled:1, value: true
ID: usespywareheuristics, enabled:1, value: true
ID: maintainbackup, enabled:1, value: true
ID: infomessages, enabled:1, value: onlyimportant, domain: display,dontnotify,onlyimportant
ID: modules, enabled:1
ID: processprotection, enabled:1, value: true
ID: onaccessprotection, enabled:1, value: true
ID: registryprotection, enabled:1, value: true
ID: networkprotection, enabled:1, value: true


****************************** System information ******************************
Computer name: AURELIA
Processor name: Intel® Pentium® D CPU 2.80GHz
Processor identifier: x86 Family 15 Model 4 Stepping 4
Processor speed: ~2793MHZ
Raw info: processorarchitecture 0, processortype 586, processorlevel 15, processor revision 1028, number of processors 2, processor features: [MMX,SSE,SSE2]
Physical memory available: 217718784 bytes
Physical memory total: 1071722496 bytes
Virtual memory available: 1896673280 bytes
Virtual memory total: 2147352576 bytes
Memory load: 79%
Microsoft Windows XP Home Edition Service Pack 3 (build 2600)
Windows startup mode:

Running processes:
PID: 380 name: \SystemRoot\System32\smss.exe owner: SYSTEM domain: NT AUTHORITY
PID: 420 name: C:\WINDOWS\system32\csrss.exe owner: SYSTEM domain: NT AUTHORITY
PID: 448 name: C:\WINDOWS\system32\winlogon.exe owner: SYSTEM domain: NT AUTHORITY
PID: 492 name: C:\WINDOWS\system32\services.exe owner: SYSTEM domain: NT AUTHORITY
PID: 504 name: C:\WINDOWS\system32\lsass.exe owner: SYSTEM domain: NT AUTHORITY
PID: 696 name: C:\WINDOWS\system32\Ati2evxx.exe owner: SYSTEM domain: NT AUTHORITY
PID: 712 name: C:\WINDOWS\system32\svchost.exe owner: SYSTEM domain: NT AUTHORITY
PID: 768 name: C:\WINDOWS\system32\svchost.exe owner: NETWORK SERVICE domain: NT AUTHORITY
PID: 840 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT AUTHORITY
PID: 964 name: C:\WINDOWS\system32\svchost.exe owner: NETWORK SERVICE domain: NT AUTHORITY
PID: 1068 name: C:\WINDOWS\system32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
PID: 1216 name: C:\WINDOWS\system32\spoolsv.exe owner: SYSTEM domain: NT AUTHORITY
PID: 1360 name: C:\WINDOWS\system32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
PID: 1392 name: C:\Program Files\SUPERAntiSpyware\SASCORE.EXE owner: SYSTEM domain: NT AUTHORITY
PID: 1404 name: C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe owner: SYSTEM domain: NT AUTHORITY
PID: 1424 name: C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe owner: SYSTEM domain: NT AUTHORITY
PID: 1464 name: C:\Program Files\Bonjour\mDNSResponder.exe owner: SYSTEM domain: NT AUTHORITY
PID: 1488 name: C:\WINDOWS\system32\CTsvcCDA.EXE owner: SYSTEM domain: NT AUTHORITY
PID: 1508 name: C:\WINDOWS\eHome\ehRecvr.exe owner: SYSTEM domain: NT AUTHORITY
PID: 1524 name: C:\WINDOWS\eHome\ehSched.exe owner: SYSTEM domain: NT AUTHORITY
PID: 1544 name: C:\WINDOWS\system32\FsUsbExService.Exe owner: SYSTEM domain: NT AUTHORITY
PID: 1732 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT AUTHORITY
PID: 1760 name: C:\Program Files\Java\jre6\bin\jqs.exe owner: SYSTEM domain: NT AUTHORITY
PID: 1816 name: C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe owner: SYSTEM domain: NT AUTHORITY
PID: 2024 name: C:\WINDOWS\ehome\RMSvc.exe owner: SYSTEM domain: NT AUTHORITY
PID: 340 name: C:\WINDOWS\system32\svchost.exe owner: LOCAL SERVICE domain: NT AUTHORITY
PID: 412 name: C:\WINDOWS\system32\svchost.exe owner: SYSTEM domain: NT AUTHORITY
PID: 940 name: C:\WINDOWS\ehome\mcrdsvc.exe owner: LOCAL SERVICE domain: NT AUTHORITY
PID: 1060 name: C:\Program Files\Windows Media Player\WMPNetwk.exe owner: NETWORK SERVICE domain: NT AUTHORITY
PID: 2276 name: C:\WINDOWS\system32\dllhost.exe owner: SYSTEM domain: NT AUTHORITY
PID: 2784 name: C:\WINDOWS\Explorer.EXE owner: admin domain: AURELIA
PID: 2872 name: C:\WINDOWS\System32\alg.exe owner: LOCAL SERVICE domain: NT AUTHORITY
PID: 156 name: C:\WINDOWS\stsystra.exe owner: admin domain: AURELIA
PID: 164 name: C:\Program Files\Multimedia Card Reader(6337)\ShwiconX.exe owner: admin domain: AURELIA
PID: 1856 name: C:\Program Files\iTunes\iTunesHelper.exe owner: admin domain: AURELIA
PID: 208 name: C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe owner: admin domain: AURELIA
PID: 552 name: C:\Program Files\Common Files\AOL\1148510780\ee\AOLSoftware.exe owner: admin domain: AURELIA
PID: 128 name: C:\WINDOWS\ehome\ehtray.exe owner: admin domain: AURELIA
PID: 824 name: C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe owner: admin domain: AURELIA
PID: 1048 name: C:\WINDOWS\System32\DLA\DLACTRLW.EXE owner: admin domain: AURELIA
PID: 892 name: C:\Program Files\DivX\DivX Update\DivXUpdate.exe owner: admin domain: AURELIA
PID: 1540 name: C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe owner: admin domain: AURELIA
PID: 1624 name: C:\Program Files\Windows Media Player\WMPNSCFG.exe owner: admin domain: AURELIA
PID: 1916 name: C:\Program Files\DellSupport\DSAgnt.exe owner: admin domain: AURELIA
PID: 2096 name: C:\WINDOWS\system32\ctfmon.exe owner: admin domain: AURELIA
PID: 2140 name: C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe owner: admin domain: AURELIA
PID: 2120 name: C:\WINDOWS\system32\dlcccoms.exe owner: SYSTEM domain: NT AUTHORITY
PID: 2476 name: C:\WINDOWS\eHome\ehmsas.exe owner: admin domain: AURELIA
PID: 3296 name: C:\Program Files\iPod\bin\iPodService.exe owner: SYSTEM domain: NT AUTHORITY
PID: 2856 name: C:\Program Files\Internet Explorer\IEXPLORE.EXE owner: admin domain: AURELIA
PID: 3340 name: C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe owner: admin domain: AURELIA
PID: 2884 name: C:\WINDOWS\system32\msiexec.exe owner: SYSTEM domain: NT AUTHORITY
PID: 2700 name: C:\WINDOWS\system32\wbem\wmiprvse.exe owner: SYSTEM domain: NT AUTHORITY
PID: 3452 name: C:\Documents and Settings\All Users\Application Data\Ad-Aware Browsing Protection\adawarebp.exe owner: SYSTEM domain: NT AUTHORITY
PID: 2824 name: C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe owner: admin domain: AURELIA
PID: 2092 name: C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe owner: SYSTEM domain: NT AUTHORITY
PID: 2616 name: C:\WINDOWS\system32\wbem\unsecapp.exe owner: SYSTEM domain: NT AUTHORITY
PID: 2088 name: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe owner: admin domain: AURELIA

Startup items:
Name: adaware
imagepath: reg.exe delete "HKCU\Software\AppDataLow\Software\adaware" /f
Name: adaware_XP
imagepath: reg.exe delete "HKCU\Software\adaware" /f
Name: PostBootReminder
imagepath: {7849596a-48ea-486e-8937-a2a3009f31a9}
Name: CDBurn
imagepath: {fbeb8a05-beee-4442-804e-409d6c4515e9}
Name: WebCheck
imagepath: {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
Name: SysTray
imagepath: {35CEC8A3-2BE6-11D2-8773-92E220524153}
Name: UPnPMonitor
imagepath: {e57ce738-33e8-4c51-8354-bb4de9d215d1}
Name: WPDShServiceObj
imagepath: {AAA288BA-9A4C-45B0-95D7-94D524869DB5}
Name: {438755C2-A8BA-11D1-B96B-00A0C90312E1}
imagepath: Browseui preloader
Name: {8C7461EF-2B13-11d2-BE35-3078302C2030}
imagepath: Component Categories cache daemon
Name: QuickTime Task
imagepath: "C:\Program Files\QuickTime\qttask.exe" -atboottime
Name: SunJavaUpdateSched
imagepath: C:\Program Files\Java\jre6\bin\jusched.exe
Name: SigmatelSysTrayApp
imagepath: stsystra.exe
Name: ShwiconXP6377
imagepath: C:\Program Files\Multimedia Card Reader(6337)\ShwiconX.exe
Name: NPSStartup
Name: iTunesHelper
imagepath: "C:\Program Files\iTunes\iTunesHelper.exe"
Name: ISUSScheduler
imagepath: "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
Name: ISUSPM Startup
imagepath: "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
Name: IPHSend
imagepath: C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
Name: igfxtray
imagepath: C:\WINDOWS\system32\igfxtray.exe
Name: igfxpers
imagepath: C:\WINDOWS\system32\igfxpers.exe
Name: igfxhkcmd
imagepath: C:\WINDOWS\system32\hkcmd.exe
Name: HostManager
imagepath: C:\Program Files\Common Files\AOL\1148510780\ee\AOLSoftware.exe
Name: ehTray
imagepath: C:\WINDOWS\ehome\ehtray.exe
Name: dlccmon.exe
imagepath: "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
Name: DLA
imagepath: C:\WINDOWS\System32\DLA\DLACTRLW.EXE
Name: DivXUpdate
imagepath: "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
Name: ATIPTA
imagepath: "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
Name:
imagepath: C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup\desktop.ini

Bootexecute items:

Running services:
Name: !SASCORE
displayname: SAS Core Service
Name: ALG
displayname: Application Layer Gateway Service
Name: AOL ACS
displayname: AOL Connectivity Service
Name: Apple Mobile Device
displayname: Apple Mobile Device
Name: Ati HotKey Poller
displayname: Ati HotKey Poller
Name: AudioSrv
displayname: Windows Audio
Name: BITS
displayname: Background Intelligent Transfer Service
Name: Bonjour Service
displayname: Bonjour Service
Name: Browser
displayname: Computer Browser
Name: COMSysApp
displayname: COM+ System Application
Name: Creative Service for CDROM Access
displayname: Creative Service for CDROM Access
Name: CryptSvc
displayname: CryptSvc
Name: DcomLaunch
displayname: DCOM Server Process Launcher
Name: Dhcp
displayname: DHCP Client
Name: dlcc_device
displayname: dlcc_device
Name: dmserver
displayname: Logical Disk Manager
Name: Dnscache
displayname: DNS Client
Name: ehRecvr
displayname: Media Center Receiver Service
Name: ehSched
displayname: Media Center Scheduler Service
Name: ERSvc
displayname: Error Reporting Service
Name: Eventlog
displayname: Event Log
Name: EventSystem
displayname: COM+ Event System
Name: FastUserSwitchingCompatibility
displayname: Fast User Switching Compatibility
Name: FsUsbExService
displayname: FsUsbExService
Name: helpsvc
displayname: Help and Support
Name: HidServ
displayname: HID Input Service
Name: HTTPFilter
displayname: HTTP SSL
Name: iPod Service
displayname: iPod Service
Name: JavaQuickStarterService
displayname: Java Quick Starter
Name: lanmanserver
displayname: Server
Name: lanmanworkstation
displayname: Workstation
Name: LmHosts
displayname: TCP/IP NetBIOS Helper
Name: MBAMService
displayname: MBAMService
Name: McrdSvc
displayname: Media Center Extender Service
Name: MSIServer
displayname: Windows Installer
Name: Netman
displayname: Network Connections
Name: Nla
displayname: Network Location Awareness (NLA)
Name: PlugPlay
displayname: Plug and Play
Name: PolicyAgent
displayname: IPSEC Services
Name: ProtectedStorage
displayname: Protected Storage
Name: RasMan
displayname: Remote Access Connection Manager
Name: RMSvc
displayname: Media Center Extender Resource Monitor
Name: RpcSs
displayname: Remote Procedure Call (RPC)
Name: SamSs
displayname: Security Accounts Manager
Name: Schedule
displayname: Task Scheduler
Name: seclogon
displayname: Secondary Logon
Name: SENS
displayname: System Event Notification
Name: SharedAccess
displayname: Windows Firewall/Internet Connection Sharing (ICS)
Name: ShellHWDetection
displayname: Shell Hardware Detection
Name: Spooler
displayname: Print Spooler
Name: srservice
displayname: System Restore Service
Name: SSDPSRV
displayname: SSDP Discovery Service
Name: stisvc
displayname: Windows Image Acquisition (WIA)
Name: TapiSrv
displayname: Telephony
Name: TermService
displayname: Terminal Services
Name: Themes
displayname: Themes
Name: TrkWks
displayname: Distributed Link Tracking Client
Name: upnphost
displayname: Universal Plug and Play Device Host
Name: w32time
displayname: Windows Time
Name: WebClient
displayname: WebClient
Name: winmgmt
displayname: Windows Management Instrumentation
Name: WMPNetworkSvc
displayname: Windows Media Player Network Sharing Service
Name: wuauserv
displayname: Automatic Updates
Name: WZCSVC
displayname: Wireless Zero Configuration
Name: Lavasoft Ad-Aware Service
displayname: Lavasoft Ad-Aware Servic

#15 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,416 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:08 PM

Posted 17 December 2011 - 08:53 PM

Ok, these infections are in your System Restore Points. Lets clean that,update and rerun MBAM.. This time run a Full scan.

Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:
  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then use Disk Cleanup to remove all but the most recently created Restore Point.
  • Go to Start > Run and type: Cleanmgr
  • Click "Ok". Disk Cleanup will scan your files for several minutes, then open.
  • Click the "More Options" tab, then click the "Clean up" button under System Restore.
  • Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"
  • Click Yes, then click Ok.
  • Click Yes again when prompted with "Are you sure you want to perform these actions?"
  • Disk Cleanup will remove the files and close automatically.
Vista Users can refer to these links: Create a New Restore Point and Disk Cleanup.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users