Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Homepage keeps changing


  • Please log in to reply
12 replies to this topic

#1 Jr6x

Jr6x

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 09 April 2013 - 06:09 PM

Homepage keeps changing after i change it too Yahoo.com. Am i infected with something? It keeps changing to this link http://www.aol.com/?mtmhp=txtlnkusaolp00000051



BC AdBot (Login to Remove)

 


#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:24 PM

Posted 09 April 2013 - 06:37 PM

Hi -

Open Internet Explorer > Tools > Internet Options - This can be done with other browsers, but I.E. is a good starter -

 

Can you tell me what is listed as your Home Page(s) -

 

Thank You -



#3 Jr6x

Jr6x
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 11 April 2013 - 02:04 AM

This is happening with Firefox. I'll check out if it's happening with IE too.

#4 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:24 PM

Posted 11 April 2013 - 06:35 AM

Just find what your Home Page(s) are listed as, and we will reset them -

Start with I.E. and then do F/Fox next -

 

Thank You -



#5 Jr6x

Jr6x
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 11 April 2013 - 05:38 PM

IE doesn't have any homepages. FF has the one i linked before http://www.aol.com/?mtmhp=txtlnkusaolp00000051



#6 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:24 PM

Posted 11 April 2013 - 07:37 PM

Open Internet Explorer > Tools > Internet Options >

In where it has a blank square Type your normal Home Page > It sounds like you use Yahoo -

http://www.yahoo.com Follow this with your country ID (eg I use .au for Australia)

 

Download AdWare Cleaner and install it
Close all open programs and browsers as the program will reboot your computer
NOTE: You may need to disable your Antivirus while this runs Information on A/V control (temp disable) HERE if needed
XP users Double click on the program to run it
Note: Vista and Windows users, Right click and select Run as Admin......
Select DELETE
Confirm each time with OK
Your computer will Reboot and a notepad text will show the results
- You can find the logfile at C:\AdwCleaner[S].txt as well.
Please post that back here.

 

Next -

Download Malwarebytes Anti-Malware Free and then SUPERAntiSpyware Free, Update them after install. Run a quick scan with each program.

Post their logs back here when finished -

 

Thank You -



#7 Jr6x

Jr6x
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 15 April 2013 - 02:26 AM

# AdwCleaner v2.200 - Logfile created 04/13/2013 at 00:43:38
# Updated 02/04/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Owner - COMPUTER
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Owner\desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\Program Files\Mozilla Firefox\plugins\npdnu.dll
File Deleted : C:\Program Files\Mozilla Firefox\plugins\npdnu.xpt
File Deleted : C:\Program Files\Mozilla Firefox\plugins\npdnupdater2.dll
File Deleted : C:\Program Files\Mozilla Firefox\plugins\npdnupdater2.xpt
Folder Deleted : C:\DOCUME~1\Owner\LOCALS~1\Temp\{f34c9277-6577-4dff-b2d7-7d58092f272f}
Folder Deleted : C:\DOCUME~1\Owner\LOCALS~1\Temp\boost_interprocess
Folder Deleted : C:\Documents and Settings\All Users\Application Data\boost_interprocess
Folder Deleted : C:\Documents and Settings\All Users\Application Data\GameTap Web Player
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Tarma Installer
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Trymedia
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Viewpoint
Folder Deleted : C:\Documents and Settings\Owner\Application Data\iWin
Folder Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\v0i82lgr.default\ConduitCommon
Folder Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\v0i82lgr.default\jetpack
Folder Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\v0i82lgr.default\Smartbar
Folder Deleted : C:\Documents and Settings\Owner\Application Data\OpenCandy
Folder Deleted : C:\Documents and Settings\Owner\Local Settings\Application Data\APN
Folder Deleted : C:\Documents and Settings\Owner\Local Settings\Application Data\Conduit
Folder Deleted : C:\Documents and Settings\Owner\Local Settings\Application Data\OpenCandy
Folder Deleted : C:\Documents and Settings\Owner\Local Settings\Application Data\PackageAware
Folder Deleted : C:\Program Files\Common Files\Software Update Utility
Folder Deleted : C:\Program Files\Viewpoint
Folder Deleted : C:\Program Files\Yontoo Layers Client

***** [Registry] *****

Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\CompeteInc
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\Headlight
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Key Deleted : HKLM\Software\CompeteInc
Key Deleted : HKLM\Software\MetaStream
Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\Viewpoint
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Mozilla Firefox v17.0 (en-US)

File : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\v0i82lgr.default\prefs.js

C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\v0i82lgr.default\user.js ... Deleted !

Deleted : user_pref("CT3014000..clientLogIsEnabled", false);
Deleted : user_pref("CT3014000..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT3014000..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT3014000.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Deleted : user_pref("CT3014000.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT3014000.BrowserCompStateIsOpen_129678246448141420", true);
Deleted : user_pref("CT3014000.BrowserCompStateIsOpen_129683397970971908", true);
Deleted : user_pref("CT3014000.CT3014000", "CT3014000");
Deleted : user_pref("CT3014000.CurrentServerDate", "21-4-2012");
Deleted : user_pref("CT3014000.DSInstall", true);
Deleted : user_pref("CT3014000.DialogsAlignMode", "LTR");
Deleted : user_pref("CT3014000.DialogsGetterLastCheckTime", "Fri Apr 20 2012 14:32:32 GMT-0700 (Pacific Daylig[...]
Deleted : user_pref("CT3014000.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"Bann[...]
Deleted : user_pref("CT3014000.EMailNotifierPollDate", "Fri Apr 20 2012 15:22:01 GMT-0700 (Pacific Daylight Ti[...]
Deleted : user_pref("CT3014000.FirstServerDate", "21-4-2012");
Deleted : user_pref("CT3014000.FirstTime", true);
Deleted : user_pref("CT3014000.FirstTimeFF3", true);
Deleted : user_pref("CT3014000.FixPageNotFoundErrors", false);
Deleted : user_pref("CT3014000.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT3014000.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT3014000.HPChangedManually", false);
Deleted : user_pref("CT3014000.HPInstall", true);
Deleted : user_pref("CT3014000.HPProtectChoice", true);
Deleted : user_pref("CT3014000.HPProtectCount", 1);
Deleted : user_pref("CT3014000.HasUserGlobalKeys", true);
Deleted : user_pref("CT3014000.HomePageProtectorEnabled", false);
Deleted : user_pref("CT3014000.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT3014000&SearchSource=[...]
Deleted : user_pref("CT3014000.Initialize", true);
Deleted : user_pref("CT3014000.InitializeCommonPrefs", true);
Deleted : user_pref("CT3014000.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT3014000.InstallationType", "DirectDownload");
Deleted : user_pref("CT3014000.InstalledDate", "Fri Apr 20 2012 14:32:49 GMT-0700 (Pacific Daylight Time)");
Deleted : user_pref("CT3014000.InvalidateCache", false);
Deleted : user_pref("CT3014000.IsAlertDBUpdated", true);
Deleted : user_pref("CT3014000.IsGrouping", false);
Deleted : user_pref("CT3014000.IsInitSetupIni", true);
Deleted : user_pref("CT3014000.IsMulticommunity", false);
Deleted : user_pref("CT3014000.IsOpenThankYouPage", true);
Deleted : user_pref("CT3014000.IsOpenUninstallPage", true);
Deleted : user_pref("CT3014000.IsProtectorsInit", true);
Deleted : user_pref("CT3014000.LanguagePackLastCheckTime", "Fri Apr 20 2012 14:32:39 GMT-0700 (Pacific Dayligh[...]
Deleted : user_pref("CT3014000.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT3014000.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT3014000.LastLogin_3.12.0.8", "Fri Apr 20 2012 15:22:09 GMT-0700 (Pacific Daylight Time)[...]
Deleted : user_pref("CT3014000.LatestVersion", "3.12.0.7");
Deleted : user_pref("CT3014000.Locale", "en");
Deleted : user_pref("CT3014000.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT3014000.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT3014000.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT3014000.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT3014000.OriginalFirstVersion", "3.12.0.8");
Deleted : user_pref("CT3014000.RadioIsPodcast", false);
Deleted : user_pref("CT3014000.RadioLastCheckTime", "Fri Apr 20 2012 14:32:37 GMT-0700 (Pacific Daylight Time)[...]
Deleted : user_pref("CT3014000.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT3014000.RadioLastUpdateServer", "3");
Deleted : user_pref("CT3014000.RadioMediaID", "9962");
Deleted : user_pref("CT3014000.RadioMediaType", "Media Player");
Deleted : user_pref("CT3014000.RadioMenuSelectedID", "EBRadioMenu_CT30140009962");
Deleted : user_pref("CT3014000.RadioShrinkedFromSetup", false);
Deleted : user_pref("CT3014000.RadioStationName", "California%20Rock");
Deleted : user_pref("CT3014000.RadioStationURL", "hxxp://feedlive.net/california.asx");
Deleted : user_pref("CT3014000.SavedHomepage", "Yahoo.com");
Deleted : user_pref("CT3014000.SearchCaption", "Radio 1.1 Customized Web Search");
Deleted : user_pref("CT3014000.SearchEngineBeforeUnload", "Radio 1.1 Customized Web Search");
Deleted : user_pref("CT3014000.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT3014000.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT301[...]
Deleted : user_pref("CT3014000.SearchInNewTabEnabled", true);
Deleted : user_pref("CT3014000.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT3014000.SearchInNewTabLastCheckTime", "Fri Apr 20 2012 14:33:00 GMT-0700 (Pacific Dayli[...]
Deleted : user_pref("CT3014000.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT3014000.SearchProtectorEnabled", true);
Deleted : user_pref("CT3014000.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT3014000.SendProtectorDataViaLogin", true);
Deleted : user_pref("CT3014000.ServiceMapLastCheckTime", "Fri Apr 20 2012 14:32:24 GMT-0700 (Pacific Daylight [...]
Deleted : user_pref("CT3014000.SettingsLastCheckTime", "Fri Apr 20 2012 14:32:24 GMT-0700 (Pacific Daylight Ti[...]
Deleted : user_pref("CT3014000.SettingsLastUpdate", "1333628615");
Deleted : user_pref("CT3014000.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT3014000.ThirdPartyComponentsLastCheck", "Fri Apr 20 2012 14:32:24 GMT-0700 (Pacific Day[...]
Deleted : user_pref("CT3014000.ThirdPartyComponentsLastUpdate", "1312887586");
Deleted : user_pref("CT3014000.ToolbarShrinkedFromSetup", false);
Deleted : user_pref("CT3014000.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3014000");
Deleted : user_pref("CT3014000.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Deleted : user_pref("CT3014000.Uninstall", true);
Deleted : user_pref("CT3014000.UserID", "UN66451260691165954");
Deleted : user_pref("CT3014000.ValidationData_Toolbar", 2);
Deleted : user_pref("CT3014000.WeatherNetwork", "");
Deleted : user_pref("CT3014000.WeatherPollDate", "Fri Apr 20 2012 15:22:04 GMT-0700 (Pacific Daylight Time)");
Deleted : user_pref("CT3014000.WeatherUnit", "F");
Deleted : user_pref("CT3014000.alertChannelId", "1405667");
Deleted : user_pref("CT3014000.backendstorage.cbcountry_000", "5553");
Deleted : user_pref("CT3014000.backendstorage.cbfirsttime", "4672692041707220323020323031322031343A33323A35342[...]
Deleted : user_pref("CT3014000.backendstorage.meevideo_user_settings_null", "7B22757365724964223A6E756C6C2C226[...]
Deleted : user_pref("CT3014000.backendstorage.shoppingapp.gk.exipres", "5765642041707220323520323031322031343A[...]
Deleted : user_pref("CT3014000.backendstorage.shoppingapp.gk.geolocation", "756E6974656420737461746573");
Deleted : user_pref("CT3014000.backendstorage.url_history0001", "687474703A2F2F3130392E3230362E3136302E3232352[...]
Deleted : user_pref("CT3014000.components.1000034", true);
Deleted : user_pref("CT3014000.components.1000234", true);
Deleted : user_pref("CT3014000.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Deleted : user_pref("CT3014000.globalFirstTimeInfoLastCheckTime", "Fri Apr 20 2012 14:32:33 GMT-0700 (Pacific [...]
Deleted : user_pref("CT3014000.homepageProtectorEnableByLogin", true);
Deleted : user_pref("CT3014000.initDone", true);
Deleted : user_pref("CT3014000.isAppTrackingManagerOn", true);
Deleted : user_pref("CT3014000.isFirstRadioInstallation", false);
Deleted : user_pref("CT3014000.myStuffEnabled", true);
Deleted : user_pref("CT3014000.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT3014000.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT3014000.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT3014000.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT3014000.navigateToUrlOnSearch", false);
Deleted : user_pref("CT3014000.revertSettingsEnabled", false);
Deleted : user_pref("CT3014000.searchProtectorDialogDelayInSec", 10);
Deleted : user_pref("CT3014000.searchProtectorEnableByLogin", true);
Deleted : user_pref("CT3014000.testingCtid", "");
Deleted : user_pref("CT3014000.toolbarAppMetaDataLastCheckTime", "Fri Apr 20 2012 14:32:32 GMT-0700 (Pacific D[...]
Deleted : user_pref("CT3014000.toolbarContextMenuLastCheckTime", "Fri Apr 20 2012 14:32:37 GMT-0700 (Pacific D[...]
Deleted : user_pref("CT3014000.usagesFlag", 2);
Deleted : user_pref("CT3251747.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3251747.FF19Solved", "true");
Deleted : user_pref("CT3251747.FirstTime", "true");
Deleted : user_pref("CT3251747.FirstTimeFF3", "true");
Deleted : user_pref("CT3251747.UserID", "UN33312828663163122");
Deleted : user_pref("CT3251747.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3251747.addressUrlXPETakeover", "true");
Deleted : user_pref("CT3251747.autoDisableScopes", 14);
Deleted : user_pref("CT3251747.defaultSearch", "false");
Deleted : user_pref("CT3251747.embeddedsData", "[{\"appId\":\"10000002\",\"apiPermissions\":{\"crossDomainAjax[...]
Deleted : user_pref("CT3251747.enableFix404ByUser", "FALSE");
Deleted : user_pref("CT3251747.enableSearchFromAddressBar", "true");
Deleted : user_pref("CT3251747.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3251747.fixPageNotFoundError", "true");
Deleted : user_pref("CT3251747.fixPageNotFoundErrorByUser", "true");
Deleted : user_pref("CT3251747.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3251747.fixUrls", true);
Deleted : user_pref("CT3251747.installDate", "28/2/2013 2:59:55");
Deleted : user_pref("CT3251747.installType", "xpe");
Deleted : user_pref("CT3251747.isCheckedStartAsHidden", true);
Deleted : user_pref("CT3251747.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3251747.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT3251747.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3251747.keyword", "true");
Deleted : user_pref("CT3251747.lastVersion", "10.14.350.31");
Deleted : user_pref("CT3251747.mam_gk_installer_preapproved.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3251747.migrateAppsAndComponents", true);
Deleted : user_pref("CT3251747.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Deleted : user_pref("CT3251747.openThankYouPage", "false");
Deleted : user_pref("CT3251747.openUninstallPage", "true");
Deleted : user_pref("CT3251747.revertSettingsEnabled", "false");
Deleted : user_pref("CT3251747.searchInNewTabEnabledByUser", "false");
Deleted : user_pref("CT3251747.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3251747.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3251747.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3251747.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\[...]
Deleted : user_pref("CT3251747.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3251747.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3251747.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3251747.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3251747.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1362049432644");
Deleted : user_pref("CT3251747.serviceLayer_services_appsMetadata_lastUpdate", "1362049432530");
Deleted : user_pref("CT3251747.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1362049431789");
Deleted : user_pref("CT3251747.serviceLayer_services_location_lastUpdate", "1362049420228");
Deleted : user_pref("CT3251747.serviceLayer_services_login_10.14.350.31_lastUpdate", "1362049433911");
Deleted : user_pref("CT3251747.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1362049432116");
Deleted : user_pref("CT3251747.serviceLayer_services_searchAPI_lastUpdate", "1362049420308");
Deleted : user_pref("CT3251747.serviceLayer_services_serviceMap_lastUpdate", "1362049417462");
Deleted : user_pref("CT3251747.serviceLayer_services_setupAPI_lastUpdate", "1362049432700");
Deleted : user_pref("CT3251747.serviceLayer_services_toolbarContextMenu_lastUpdate", "1362049431367");
Deleted : user_pref("CT3251747.serviceLayer_services_toolbarSettings_lastUpdate", "1362049420385");
Deleted : user_pref("CT3251747.serviceLayer_services_translation_lastUpdate", "1362049432438");
Deleted : user_pref("CT3251747.settingsINI", true);
Deleted : user_pref("CT3251747.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT3251747.smartbar.CTID", "CT3251747");
Deleted : user_pref("CT3251747.smartbar.Uninstall", "0");
Deleted : user_pref("CT3251747.smartbar.toolbarName", "PrizeRebelBar ");
Deleted : user_pref("CT3251747.startPage", "false");
Deleted : user_pref("CT3251747.toolbarBornServerTime", "28-2-2013");
Deleted : user_pref("CT3251747.toolbarCurrentServerTime", "28-2-2013");
Deleted : user_pref("CT3251747_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3014000&Search[...]
Deleted : user_pref("CommunityToolbar.ConduitSearchList", "Radio 1.1 Customized Web Search");
Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3014000/CT3014000[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1405667/1401325/US", "\"0\"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3014000", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3014000",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"c46[...]
Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\Owner\\Application[...]
Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.12.0.8");
Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://www.google.com/search?hl=en-GB&q=[...]
Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT3014000");
Deleted : user_pref("CommunityToolbar.ToolbarsList2", "");
Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT3014000");
Deleted : user_pref("CommunityToolbar.globalUserId", "933ac13f-474d-425e-b946-889daa3f9991");
Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3014000");
Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Fri Apr 20 2012 14:32:3[...]
Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", true);
Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Fri Apr 20 2012 15:32:50 GMT-070[...]
Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri Apr 20 2012 14:32:32 GMT-0700 (P[...]
Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.notifications.userId", "66059af2-5304-4966-81ad-dffd49f70676");
Deleted : user_pref("CommunityToolbar.originalHomepage", "Yahoo.com");
Deleted : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties[...]
Deleted : user_pref("FirstSearch.aol_toolbar.search.hasDoneFirst", 8);
Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", " hxxp://www.google.com/search?hl=en&q=");
Deleted : user_pref("aol_toolbar.button.1287080627526_1339733821773.view", "1");
Deleted : user_pref("aol_toolbar.button.1329315558168_1339733817106.view", "1");
Deleted : user_pref("aol_toolbar.button.aol_mail_5496.click", "1");
Deleted : user_pref("aol_toolbar.button.facebook_40839.click", "1");
Deleted : user_pref("aol_toolbar.button.hulu_1338116449467.view", "1");
Deleted : user_pref("aol_toolbar.button.mapquest_40872.click", "1");
Deleted : user_pref("aol_toolbar.button.netflix_40927.click", "1");
Deleted : user_pref("aol_toolbar.button.share_this_page_23802.click", "1");
Deleted : user_pref("aol_toolbar.button.shoutcast_radio_5302.click", "1");
Deleted : user_pref("aol_toolbar.button.twitter_40883.click", "1");
Deleted : user_pref("aol_toolbar.button.wikipedia_40905.click", "1");
Deleted : user_pref("aol_toolbar.button.yahoo_mail_40916.click", "1");
Deleted : user_pref("aol_toolbar.buttons.defaultview", 1);
Deleted : user_pref("aol_toolbar.buttons.layout", "facebook_40839;twitter_40883;1329315558168_1339733817106;12[...]
Deleted : user_pref("aol_toolbar.cookie.homepage", "");
Deleted : user_pref("aol_toolbar.cookie.search", "");
Deleted : user_pref("aol_toolbar.curtain.congrats", "curtain");
Deleted : user_pref("aol_toolbar.default.homepage.check", false);
Deleted : user_pref("aol_toolbar.default.homepage.protection", true);
Deleted : user_pref("aol_toolbar.default.homepage.url", "hxxp://www.aol.com/?mtmhp=txtlnkusaolp00000051");
Deleted : user_pref("aol_toolbar.default.search.check", false);
Deleted : user_pref("aol_toolbar.default.search.label", "AOL Search");
Deleted : user_pref("aol_toolbar.default.search.url", "hxxp://search.aol.com/search/search?q={searchTerms}&s_i[...]
Deleted : user_pref("aol_toolbar.firsttime.showwindow", false);
Deleted : user_pref("aol_toolbar.guid", "{BCA9D59F-63B1-3818-9C56-37E05BA6C59E}");
Deleted : user_pref("aol_toolbar.homepageprotection.enabled", true);
Deleted : user_pref("aol_toolbar.install.distroid", "");
Deleted : user_pref("aol_toolbar.install.homepage", "hxxp://www.aol.com/?mtmhp={mtmhp}");
Deleted : user_pref("aol_toolbar.install.lastTbVersion", "5.74.1.9393");
Deleted : user_pref("aol_toolbar.install.lid", "hyplognew00000010");
Deleted : user_pref("aol_toolbar.install.mtmhp", "txtlnkusaolp00000051");
Deleted : user_pref("aol_toolbar.install.ncid", "");
Deleted : user_pref("aol_toolbar.metrics.activestampdate", "13");
Deleted : user_pref("aol_toolbar.metrics.activestampmonth", "3");
Deleted : user_pref("aol_toolbar.metrics.activestampyear", "2013");
Deleted : user_pref("aol_toolbar.metrics.log", false);
Deleted : user_pref("aol_toolbar.metrics.originalDate", "19");
Deleted : user_pref("aol_toolbar.metrics.originalHours", "7");
Deleted : user_pref("aol_toolbar.metrics.originalMinutes", "46");
Deleted : user_pref("aol_toolbar.metrics.originalMonth", "5");
Deleted : user_pref("aol_toolbar.metrics.originalSeconds", "21");
Deleted : user_pref("aol_toolbar.metrics.originalYear", "2011");
Deleted : user_pref("aol_toolbar.relatednews.active", true);
Deleted : user_pref("aol_toolbar.relatednews.enabled", false);
Deleted : user_pref("aol_toolbar.remote..xml", "1365838333973");
Deleted : user_pref("aol_toolbar.remote.alerts.xml", "1331142967596");
Deleted : user_pref("aol_toolbar.remote.publish.xml", "1365838333972");
Deleted : user_pref("aol_toolbar.remote.ticker.rss", "1339916690554");
Deleted : user_pref("aol_toolbar.reset.flag", "1");
Deleted : user_pref("aol_toolbar.reset.style", "A");
Deleted : user_pref("aol_toolbar.resetprompt.daily.num", "2");
Deleted : user_pref("aol_toolbar.resetprompt.daily.timestamp", "Wed Apr 03 2013 21:43:01 GMT-0700 (Pacific Day[...]
Deleted : user_pref("aol_toolbar.resetprompt.display.limit", "8");
Deleted : user_pref("aol_toolbar.rtw.active", false);
Deleted : user_pref("aol_toolbar.rtw.enabled", "1");
Deleted : user_pref("aol_toolbar.search.button", true);
Deleted : user_pref("aol_toolbar.search.cid", "03-04-2013");
Deleted : user_pref("aol_toolbar.search.focusnewtab", false);
Deleted : user_pref("aol_toolbar.search.instd", "20110519074508015");
Deleted : user_pref("aol_toolbar.search.newtab", false);
Deleted : user_pref("aol_toolbar.search.oid", "19-05-2011");
Deleted : user_pref("aol_toolbar.search.placement", "right");
Deleted : user_pref("aol_toolbar.search.populateoncomplete", false);
Deleted : user_pref("aol_toolbar.search.savehistory", false);
Deleted : user_pref("aol_toolbar.search.searchtype", "web");
Deleted : user_pref("aol_toolbar.search.source", "aolrt-ff");
Deleted : user_pref("aol_toolbar.searchengine.label", "AOL Search");
Deleted : user_pref("aol_toolbar.searchprotection.enabled", false);
Deleted : user_pref("aol_toolbar.skin.custom", false);
Deleted : user_pref("aol_toolbar.skins.enabled", true);
Deleted : user_pref("aol_toolbar.surf.date", "11");
Deleted : user_pref("aol_toolbar.surf.enabled", "0");
Deleted : user_pref("aol_toolbar.surf.lastDate", "13");
Deleted : user_pref("aol_toolbar.surf.lastMonth", "3");
Deleted : user_pref("aol_toolbar.surf.lastYear", "2013");
Deleted : user_pref("aol_toolbar.surf.mURL", "");
Deleted : user_pref("aol_toolbar.surf.mURLh", "0");
Deleted : user_pref("aol_toolbar.surf.mURLw", "0");
Deleted : user_pref("aol_toolbar.surf.mURLx", "0");
Deleted : user_pref("aol_toolbar.surf.mURLy", "0");
Deleted : user_pref("aol_toolbar.surf.milestone", "-1");
Deleted : user_pref("aol_toolbar.surf.month", "2448");
Deleted : user_pref("aol_toolbar.surf.prevMonth", "3653");
Deleted : user_pref("aol_toolbar.surf.show", true);
Deleted : user_pref("aol_toolbar.surf.total", "427903");
Deleted : user_pref("aol_toolbar.surf.week", "1309");
Deleted : user_pref("aol_toolbar.surf.year", "12842");
Deleted : user_pref("aol_toolbar.ticker.active", false);
Deleted : user_pref("aol_toolbar.ticker.animation", "hscroll");
Deleted : user_pref("aol_toolbar.ticker.collapsed", "0");
Deleted : user_pref("aol_toolbar.ticker.enabled", true);
Deleted : user_pref("aol_toolbar.ticker.endColor", "444444");
Deleted : user_pref("aol_toolbar.ticker.fontFamily", "Arial, Helvetica, sans-serif");
Deleted : user_pref("aol_toolbar.ticker.fontSize", "10");
Deleted : user_pref("aol_toolbar.ticker.maxWidth", "200");
Deleted : user_pref("aol_toolbar.ticker.show", true);
Deleted : user_pref("aol_toolbar.ticker.startColor", "0D0D0D");
Deleted : user_pref("aol_toolbar.ticker.tipHidden", "Show Headlines");
Deleted : user_pref("aol_toolbar.ticker.tipVisible", "Hide Headlines");
Deleted : user_pref("aol_toolbar.ticker.url", "hxxp://feeds.feedburner.com/aolnewstopstories");
Deleted : user_pref("aol_toolbar.toolbar.name", "AOL Toolbar");
Deleted : user_pref("aol_toolbar.upgrade.showwindow", false);
Deleted : user_pref("aol_toolbar.weather.degc", "13");
Deleted : user_pref("aol_toolbar.weather.degf", "56");
Deleted : user_pref("aol_toolbar.weather.image", "chrome://aoltoolbar/skin/weather/27_n.png");
Deleted : user_pref("aol_toolbar.weather.locationid", "USCA0078");
Deleted : user_pref("aol_toolbar.weather.metric", true);
Deleted : user_pref("aol_toolbar.weather.tooltip", "Bell , CA : Mostly Cloudy");
Deleted : user_pref("aol_toolbar.weather.update", "1365838334066");
Deleted : user_pref("aol_toolbar.weather.zipcode", "90201");
Deleted : user_pref("aol_toolbar.winamp.volume", "");
Deleted : user_pref("aol_toolbar.xxx", "");
Deleted : user_pref("browser.search.defaultthis.engineName", "Radio 1.1 Customized Web Search");
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.aol.com/search/search?q={searchTerms}&s_it=aol[...]
Deleted : user_pref("browser.search.order.1", "Search Results");
Deleted : user_pref("extensions.Retrogamer_2z.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opens[...]
Deleted : user_pref("extensions.Retrogamer_2z.prevKwdURL", "hxxp://search.mywebsearch.com/mywebsearch/GGmain.j[...]
Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Deleted : user_pref("smartbar.machineId", "GJM6O9QVKPEOVUOBHDB2F+2VW4TQTQVXS0R1XKARED/1OIW1KZ0B6JC4YPU/CNOPB4S[...]
Deleted : user_pref("smartbar.originalSearchAddressUrl", " hxxp://www.google.com/search?hl=en&q=");

-\\ Google Chrome v26.0.1410.64

File : C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

Deleted [l.47] : search_url = "hxxp://dts.search-results.com/sr?src=crb&appid=287&systemid=406&sr=0&q={searchT[...]
Deleted [l.2232] : homepage = "hxxp://www.searchnu.com/406",
Deleted [l.2715] : urls_to_restore_on_startup = [ "hxxp://www.searchnu.com/406" ]

*************************

AdwCleaner[R1].txt - [9642 octets] - [13/04/2013 00:41:57]
AdwCleaner[S1].txt - [33541 octets] - [13/04/2013 00:43:38]

########## EOF - C:\AdwCleaner[S1].txt - [33602 octets] ##########
 

 

Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Database version: v2013.04.08.07

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Owner :: COMPUTER [administrator]

4/14/2013 1:24:16 AM
mbam-log-2013-04-14 (01-24-16).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 225916
Time elapsed: 24 minute(s), 3 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Documents and Settings\Owner\Local Settings\temp\CSM24.tmp (PUP.Adware.RelevantKnowledge) -> Delete on reboot.
C:\RECYCLER\S-1-5-21-1882975283-9876242-1659485762-1003\Dc3.exe (PUP.Adware.RelevantKnowledge) -> Quarantined and deleted successfully.

(end)
 

 

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 04/14/2013 at 02:26 PM

Application Version : 5.6.1014

Core Rules Database Version : 10258
Trace Rules Database Version: 8070

Scan type       : Quick Scan
Total Scan Time : 00:55:54

Operating System Information
Windows XP Home Edition 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned      : 409
Memory threats detected   : 0
Registry items scanned    : 32309
Registry threats detected : 0
File items scanned        : 7449
File threats detected     : 116

Adware.Tracking Cookie
    .atwola.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .at.atwola.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .atwola.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .ar.atwola.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .atwola.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .doubleclick.net [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .liveperson.net [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .specificclick.net [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .advertising.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .advertising.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .zedo.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .zedo.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .zedo.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .fastclick.net [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .liveperson.net [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .burstnet.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    server.iad.liveperson.net [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .at.atwola.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .statcounter.com [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .2o7.net [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .doubleclick.net [ C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\V0I82LGR.DEFAULT\COOKIES.SQLITE ]
    .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    da-tracking.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    da-tracking.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    7.rotator.wigetmedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    7.rotator.wigetmedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    7.rotator.wigetmedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .advertising.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .game-advertising-online.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .adbrite.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .ru4.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    mediaservices-d.openxenterprise.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .tns-counter.ru [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .atdmt.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .atdmt.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .advertising.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .advertising.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .advertising.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .questionmarket.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .questionmarket.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .advertising.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .ad.mlnadvertising.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .kanoodle.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .pro-market.net [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .adbrite.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .legolas-media.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .legolas-media.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .serving-sys.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .serving-sys.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .at.atwola.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .revsci.net [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .revsci.net [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .revsci.net [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .revsci.net [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .interclick.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .specificclick.net [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .serving-sys.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .serving-sys.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .serving-sys.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    www.googleadservices.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    .tribalfusion.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
    stats.adotube.com [ C:\DOCUMENTS AND SETTINGS\OWNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
 



#8 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:24 PM

Posted 15 April 2013 - 05:34 PM

Hi -

AdwCleaner has removed a lot of "junk files" and quite a few unwanted, installed tool bars.

If you have removed any preferred personal toolbars, please be careful to only reinstall the required ones,

Also - homepage = "hxxp://www.searchnu.com/406" which is a known redirection installer is removed.

 

Has this improved anything at all ? Finally I'd like us to scan your machine with ESET OnlineScan -

 

For those using Internet Explorer, this is the preferred method
1. Hold down Control (CTRL) and click on This Link to open ESET OnlineScan in a new window.
2. Click the ESET Online Scanner button.
3. For alternate browsers only: (Internet Explorer users can skip these steps)

 

1. Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
2. Double click on the icon on your desktop.

 

4. Check "YES, I accept the Terms of Use."

5. Click the Start button.
6. Accept any security warnings from your browser, and disable your Antivirus if requested - How To Temporarily Disable Your Anti-virus
7. Under scan settings, check "Scan Archives" and "Remove found threats"
8. Click Advanced settings and select the following:*Scan potentially unwanted applications
*Scan for potentially unsafe applications
*Enable Anti-Stealth technology

9. ESET will then download updates for itself, install itself, and begin scanning your computer.

Please be patient as this can take quite some time to install the program for a first use, plus current definition updates..


10. When the scan completes, click List Threats
11. Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
12. Click the Back button.
13. Click the Finish button.

NOTE: Sometimes if ESET finds no infections it will not create a log.

 

Thank You -



#9 Jr6x

Jr6x
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 16 April 2013 - 06:48 PM

Homepage is still getting redirected. I'll do the scan.



#10 Jr6x

Jr6x
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 20 April 2013 - 02:23 AM

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BrothersoftExtremeCT.zip    Win32/Bagle.gen.zip worm    cleaned by deleting - quarantined
C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Default\aajjpgfenhnephbckpojioanoblcojdf\background.html    Win32/BHO.OEI trojan    cleaned by deleting - quarantined
C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Default\aajjpgfenhnephbckpojioanoblcojdf\ContentScript.js    Win32/Boaxxe.U trojan    cleaned by deleting - quarantined
C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP209\A0146433.dll    Win32/Toolbar.MyWebSearch application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP209\A0146434.dll    Win32/Toolbar.MyWebSearch application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP209\A0146435.dll    Win32/Toolbar.MyWebSearch application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP219\A0159106.exe    a variant of Win32/Adware.LIImpact.A application    cleaned by deleting - quarantined
C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP237\A0179031.dll    a variant of Win32/Adware.Yontoo.B application    cleaned by deleting - quarantined
 



Were these viruses dangerous??



#11 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:24 PM

Posted 20 April 2013 - 04:09 AM

Win32/Bagle.gen - Alert Level (?) Severe
Win32/BHO.OEI trojan - Alert Level (?) Severe
Win32/Boaxxe.U trojan - This type of malicious program is frequently used in the initial infection of visitors to websites which contain exploits. Do you use any P2P type programs like utorrent. This is the type of area where it is hiding and waiting.
Win32/Toolbar.MyWebSearch - This is a very annoying minor infection.
Win32/Adware.LIImpact.A - Category, adware.
Win32/Adware.Yontoo.B - Usually a very hard to remove adware threat that causes pop-ups

 

When you see a file with a name like \aajjpgfenhnephbckpojioanoblcojdf\, as in the second infection, you can be sure it is very suspect -
These are the definitions given by the Antivirus sites, although some are known by other similar names.

All are infections that do need removal -

 

Has the problem changed at all ??

 

Thank You -



#12 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:02:24 PM

Posted 21 April 2013 - 04:52 PM

To Reset Firefox to your Home page do the following:

1. Go to Firefox > Help > Troubleshooting Information.
2. Click the "Reset Firefox" button.
3. Firefox will close and reset. After Firefox is done, it will show a window with the information that is imported. Click Finish.
4. Firefox will open with all factory defaults applied.

Further information can be found in the Reset Firefox – easily fix most problems article.



#13 Jr6x

Jr6x
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:08:24 PM

Posted 23 April 2013 - 02:42 AM

Still changed back. i'll do the reset later on. I'm having electric problems right now.



Still changed back. i'll do the reset later on. I'm having electric problems right now.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users