Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Adware Infection, Possibly More


  • Please log in to reply
11 replies to this topic

#1 Kornholio EFX

Kornholio EFX

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:43 AM

Posted 21 June 2006 - 05:38 PM

This all started when Spywarequake got accidently installed on my comp. I did a google search for removal, and found these forums. I took all the original steps for removing this program on the Spywarequake post, but was still seeing signs of infection not related to the orignal program.

As of now, I get advertisements for virus and spyware removal popping up in iexplorer.exe and i?xplorer.exe. Also, there are two windows that pop up simultaneously (these happen more often), named "ULWindowSeek" and "ULWindowUrl" respectively. The windows are opened from "C:\WINDOWS\temp\win**.tmp.exe" where the "**" represents a different hexadecimal number (1A or 50 for example) everytime the windows open. The former is blank while the latter looks as such:

Posted Image

Alright, I took all the steps in the "Preparation Guide for Use Before Posting a Hijackthis Log", except for step 5. Everyone of the scanning options would lockup partway through the scan, and I tried each method multiple times. I don't know if there's a virus or something locking up any possible computer scanner.

I installed the Zone Alarm firewall, and it is currently running. I've done numerous scans with "Spyware - Search & Destroy" and "Lavasoft Ad-Aware SE", each comes up with new threats each time, and are used to remove said threats each time.

Here is my current HiJackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 3:35:52 PM, on 6/21/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Real\RealPlayer\realplay.exe
C:\Documents and Settings\Ryan\Application Data\??sks\i?xplore.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.earthlink.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = prosearching.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.pvponline.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/...://my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = prosearching.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = prosearching.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided by Cox High Speed Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: SrchHook Class - {44F9B173-041C-4825-A9B9-D914BD9DCBB3} - C:\Program Files\EarthLink TotalAccess\elnIE.dll
R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - {17796EDC-A34E-82EE-4AB3-A6BFAB8DD790} - C:\WINDOWS\system32\wbzuowwa.dll
F2 - REG:system.ini: UserInit=userinit.exe
O3 - Toolbar: EarthLink Toolbar - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1123
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.com/.../ymmapi_416.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

BC AdBot (Login to Remove)

 


#2 MFDnSC

MFDnSC

    Ret. Director I/T


  • Members
  • 4,310 posts
  • OFFLINE
  •  
  • Local time:10:43 AM

Posted 21 June 2006 - 08:45 PM

Go to the link below and download the trial version of SpySweeper:

SpySweeper http://www.webroot.com/consumer/products/s...4129&ac=tsg

* Click the Free Trial link under "SpySweeper" to download the program.
* Install it. Once the program is installed, it will open.
* It will prompt you to update to the latest definitions, click Yes.
* Once the definitions are installed, click Options on the left side.
* Click the Sweep Options tab.
* Under What to Sweep please put a check next to the following:
o Sweep Memory
o Sweep Registry
o Sweep Cookies
o Sweep All User Accounts
o Enable Direct Disk Sweeping
o Sweep Contents of Compressed Files
o Sweep for Rootkits

o Please UNCHECK Do not Sweep System Restore Folder.

* Click Sweep Now on the left side.
* Click the Start button.
* When it's done scanning, click the Next button.
* Make sure everything has a check next to it, then click the Next button.
* It will remove all of the items found.
* Click Session Log in the upper right corner, copy everything in that window.
* Click the Summary tab and click Finish.
* Paste the contents of the session log you copied into your next reply.
Also post a new Hijack This log.
"Nothing could be finer than to be in South Carolina ............"

Member ASAP

#3 Kornholio EFX

Kornholio EFX
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:43 AM

Posted 22 June 2006 - 12:48 AM

Now something else is wrong. Anytime I try to open my program files folder, and program called dumprep.exe opens up in memory, and takes up my entire cpu and bogs everything down. It keeps opening once I end the process, until I stop opening folders.

Here is the Webroot log:

********
7:16 PM: | Start of Session, Wednesday, June 21, 2006 |
7:16 PM: Spy Sweeper started
7:16 PM: Sweep initiated using definitions version 704
7:16 PM: Starting Memory Sweep
7:16 PM: Found Adware: purityscan
7:16 PM: Detected running threat: C:\WINDOWS\system32\wbzuowwa.dll (ID = 308658)
7:17 PM: The Spy Communication shield has blocked access to: update2.outerinfo.com
7:17 PM: The Spy Communication shield has blocked access to: update2.outerinfo.com
7:19 PM: Memory Sweep Complete, Elapsed Time: 00:03:12
7:19 PM: Starting Registry Sweep
7:19 PM: Found Adware: keenvalue/perfectnav
7:19 PM: HKLM\software\perfectnav\ (1 subtraces) (ID = 129516)
7:19 PM: Found Adware: prosearching hijack
7:19 PM: HKLM\software\microsoft\internet explorer\main\ || search page (ID = 134068)
7:19 PM: Found Trojan Horse: rbot
7:19 PM: HKLM\software\krypton\ (6 subtraces) (ID = 139241)
7:19 PM: Found Trojan Horse: trojan agent winlogonhook
7:19 PM: HKLM\software\microsoft\mssmgr\ (13 subtraces) (ID = 937101)
7:19 PM: Found Adware: prosearch.com hijack
7:19 PM: HKLM\software\microsoft\internet explorer\main\ || default_search_url (ID = 1250783)
7:19 PM: HKLM\software\microsoft\internet explorer\main\ || local page (ID = 1250784)
7:19 PM: HKLM\software\microsoft\internet explorer\main\ || start page (ID = 1250785)
7:19 PM: HKLM\software\microsoft\internet explorer\main\ || search page_bak (ID = 1250789)
7:19 PM: HKLM\software\microsoft\internet explorer\main\ || searchurl (ID = 1250790)
7:19 PM: HKLM\software\microsoft\internet explorer\main\ || start page_bak (ID = 1250791)
7:19 PM: Found Adware: cws-aboutblank
7:19 PM: HKU\S-1-5-21-1060284298-1844823847-839522115-1003\software\microsoft\internet explorer\main\ || search page_bak (ID = 115925)
7:19 PM: Found Adware: webrebates
7:19 PM: HKU\S-1-5-21-1060284298-1844823847-839522115-1003\software\microsoft\internet explorer\extensions\{6685509e-b47b-4f47-8e16-9a5f3a62f683}\ (5 subtraces) (ID = 125589)
7:19 PM: Found Adware: ebates money maker
7:19 PM: HKU\S-1-5-21-1060284298-1844823847-839522115-1003\software\microsoft\internet explorer\extensions\{6685509e-b47b-4f47-8e16-9a5f3a62f683}\ (5 subtraces) (ID = 125589)
7:19 PM: Found Adware: drsnsrch.com hijack
7:19 PM: HKU\S-1-5-21-1060284298-1844823847-839522115-1003\software\microsoft\search assistant\ || defaultsearchurl (ID = 128205)
7:19 PM: HKU\S-1-5-21-1060284298-1844823847-839522115-1003\software\microsoft\internet explorer\main\ || search page_bak (ID = 774883)
7:19 PM: HKU\S-1-5-21-1060284298-1844823847-839522115-1003\software\microsoft\internet explorer\main\ || default_search_url (ID = 1339808)
7:19 PM: HKU\S-1-5-21-1060284298-1844823847-839522115-1003\software\microsoft\internet explorer\main\ || searchurl (ID = 1339809)
7:19 PM: HKU\S-1-5-21-1060284298-1844823847-839522115-1003\software\microsoft\internet explorer\main\ || start page_bak (ID = 1339810)
7:19 PM: Registry Sweep Complete, Elapsed Time:00:00:14
7:19 PM: Starting Cookie Sweep
7:19 PM: Found Spy Cookie: websponsors cookie
7:19 PM: ryan@a.websponsors[2].txt (ID = 3665)
7:19 PM: Found Spy Cookie: yieldmanager cookie
7:19 PM: ryan@ad.yieldmanager[1].txt (ID = 3751)
7:19 PM: Found Spy Cookie: adecn cookie
7:19 PM: ryan@adecn[2].txt (ID = 2063)
7:19 PM: Found Spy Cookie: adknowledge cookie
7:19 PM: ryan@adknowledge[2].txt (ID = 2072)
7:19 PM: Found Spy Cookie: specificclick.com cookie
7:19 PM: ryan@adopt.specificclick[2].txt (ID = 3400)
7:19 PM: Found Spy Cookie: tacoda cookie
7:19 PM: ryan@anad.tacoda[2].txt (ID = 6445)
7:19 PM: ryan@anat.tacoda[1].txt (ID = 6445)
7:19 PM: Found Spy Cookie: ask cookie
7:19 PM: ryan@ask[1].txt (ID = 2245)
7:19 PM: Found Spy Cookie: belnk cookie
7:19 PM: ryan@belnk[1].txt (ID = 2292)
7:19 PM: Found Spy Cookie: directtrack cookie
7:19 PM: ryan@directtrack[1].txt (ID = 2527)
7:19 PM: ryan@dist.belnk[2].txt (ID = 2293)
7:19 PM: Found Spy Cookie: 2o7.net cookie
7:19 PM: ryan@entrepreneur.122.2o7[1].txt (ID = 1958)
7:19 PM: Found Spy Cookie: realmedia cookie
7:19 PM: ryan@network.realmedia[2].txt (ID = 3236)
7:19 PM: Found Spy Cookie: offeroptimizer cookie
7:19 PM: ryan@offeroptimizer[2].txt (ID = 3087)
7:19 PM: Found Spy Cookie: partypoker cookie
7:19 PM: ryan@partypoker[2].txt (ID = 3111)
7:19 PM: Found Spy Cookie: prosearching cookie
7:19 PM: ryan@prosearching[1].txt (ID = 3201)
7:19 PM: ryan@rapidresponse.directtrack[2].txt (ID = 2528)
7:19 PM: Found Spy Cookie: reliablestats cookie
7:19 PM: ryan@stats1.reliablestats[1].txt (ID = 3254)
7:19 PM: ryan@tacoda[1].txt (ID = 6444)
7:19 PM: Found Spy Cookie: burstbeacon cookie
7:19 PM: ryan@www.burstbeacon[2].txt (ID = 2335)
7:19 PM: ryan@www.prosearching[2].txt (ID = 3202)
7:19 PM: ryan@yieldmanager[2].txt (ID = 3749)
7:19 PM: Cookie Sweep Complete, Elapsed Time: 00:00:02
7:19 PM: Starting File Sweep
7:19 PM: Found Adware: sidesearch
7:19 PM: c:\program files\lycos\sidesearch (1 subtraces) (ID = -2147480322)
7:19 PM: c:\program files\perfectnav (1 subtraces) (ID = -2147480782)
7:24 PM: Found Trojan Horse: trojan-downloader-aux
7:24 PM: srvdoo[1].exe (ID = 301189)
7:33 PM: srvmuc[1].exe (ID = 301189)
7:40 PM: srvrqi[1].exe (ID = 301189)
7:46 PM: srvpqd[1].exe (ID = 301189)
7:47 PM: srvfon[1].exe (ID = 301189)
7:50 PM: Found Adware: altnet
7:50 PM: __unin__.exe (ID = 49795)
7:56 PM: win2e2.tmp.exe (ID = 301277)
7:56 PM: dc2.exe (ID = 301189)
7:56 PM: dc3.exe (ID = 301189)
7:56 PM: dc4.exe (ID = 301189)
7:56 PM: dc5.exe (ID = 301189)
7:56 PM: win1a.tmp.exe (ID = 301189)
7:56 PM: win50.tmp.exe (ID = 301189)
7:56 PM: dc1.exe (ID = 301189)
7:56 PM: win5f.tmp.exe (ID = 301189)
7:56 PM: win79.tmp.exe (ID = 301189)
7:56 PM: win89.tmp.exe (ID = 301189)
7:58 PM: wbzuowwa.dll (ID = 308658)
8:06 PM: Found Adware: twain-tech
8:06 PM: twaintec.inf (ID = 81889)
8:06 PM: Found Adware: directrevenue-abetterinternet
8:06 PM: poltt.inf (ID = 83432)
8:06 PM: alchem.inf (ID = 83109)
8:06 PM: poltt.inf (ID = 83432)
8:06 PM: polmx.inf (ID = 81856)
8:06 PM: polmx.inf (ID = 81856)
8:06 PM: satmat.inf (ID = 83498)
8:06 PM: satmat.ini (ID = 83499)
8:06 PM: satmat.ini (ID = 83499)
8:06 PM: satmat.inf (ID = 83498)
8:08 PM: The Spy Communication shield has blocked access to: smart-security.biz
8:08 PM: The Spy Communication shield has blocked access to: smart-security.biz
8:08 PM: The Spy Communication shield has blocked access to: contents.exetrafflc.com
8:08 PM: The Spy Communication shield has blocked access to: contents.exetrafflc.com
8:08 PM: The Spy Communication shield has blocked access to: here4search.biz
8:08 PM: The Spy Communication shield has blocked access to: here4search.biz
8:13 PM: Found System Monitor: golden eye
8:13 PM: goldeneye.exe (ID = 61832)
8:17 PM: Found Adware: redvpopup
8:17 PM: tarball.wav (ID = 73686)
8:17 PM: tarball.wav (ID = 73686)
8:28 PM: Warning: Invalid Stream
8:37 PM: Warning: Invalid Stream
8:43 PM: Warning: Invalid Stream
8:43 PM: Warning: Invalid Stream
8:44 PM: File Sweep Complete, Elapsed Time: 01:25:00
8:44 PM: Full Sweep has completed. Elapsed time 01:28:32
8:44 PM: Traces Found: 106
10:28 PM: The Spy Communication shield has blocked access to: smart-security.biz
10:28 PM: The Spy Communication shield has blocked access to: smart-security.biz
10:28 PM: The Spy Communication shield has blocked access to: contents.exetrafflc.com
10:28 PM: The Spy Communication shield has blocked access to: contents.exetrafflc.com
10:28 PM: The Spy Communication shield has blocked access to: here4search.biz
10:28 PM: The Spy Communication shield has blocked access to: here4search.biz
10:29 PM: Removal process initiated
10:30 PM: Quarantining All Traces: cws-aboutblank
10:30 PM: Quarantining All Traces: directrevenue-abetterinternet
10:30 PM: Quarantining All Traces: golden eye
10:30 PM: Quarantining All Traces: purityscan
10:30 PM: purityscan is in use. It will be removed on reboot.
10:30 PM: wbzuowwa.dll is in use. It will be removed on reboot.
10:30 PM: Quarantining All Traces: rbot
10:30 PM: Quarantining All Traces: trojan agent winlogonhook
10:30 PM: Quarantining All Traces: sidesearch
10:30 PM: Quarantining All Traces: trojan-downloader-aux
10:30 PM: Quarantining All Traces: altnet
10:30 PM: Quarantining All Traces: drsnsrch.com hijack
10:30 PM: Quarantining All Traces: ebates money maker
10:30 PM: Quarantining All Traces: keenvalue/perfectnav
10:30 PM: Quarantining All Traces: prosearch.com hijack
10:30 PM: Warning: Failed to set data for 'Start Page'
10:30 PM: Failed to quarantine prosearch.com hijack
10:30 PM: Failed to quarantine HKLM: software\microsoft\internet explorer\main\ || start page
10:30 PM: Quarantining All Traces: prosearching hijack
10:30 PM: Quarantining All Traces: redvpopup
10:30 PM: Quarantining All Traces: twain-tech
10:30 PM: Quarantining All Traces: webrebates
10:30 PM: Quarantining All Traces: 2o7.net cookie
10:30 PM: Quarantining All Traces: adecn cookie
10:30 PM: Quarantining All Traces: adknowledge cookie
10:30 PM: Quarantining All Traces: ask cookie
10:30 PM: Quarantining All Traces: belnk cookie
10:30 PM: Quarantining All Traces: burstbeacon cookie
10:30 PM: Quarantining All Traces: directtrack cookie
10:30 PM: Quarantining All Traces: offeroptimizer cookie
10:30 PM: Quarantining All Traces: partypoker cookie
10:30 PM: Quarantining All Traces: prosearching cookie
10:30 PM: Quarantining All Traces: realmedia cookie
10:30 PM: Quarantining All Traces: reliablestats cookie
10:30 PM: Quarantining All Traces: specificclick.com cookie
10:30 PM: Quarantining All Traces: tacoda cookie
10:30 PM: Quarantining All Traces: websponsors cookie
10:30 PM: Quarantining All Traces: yieldmanager cookie
10:31 PM: Preparing to restart your computer. Please wait...
10:31 PM: Removal process completed. Elapsed time 00:01:29
10:33 PM: Sent error log: C:\Documents and Settings\Ryan\Application Data\Webroot\Spy Sweeper\Logs\bugreport.txt
10:34 PM: Processing Startup Alerts
10:34 PM: Removed Startup entry: ctfmon.exe
10:36 PM: The Spy Communication shield has blocked access to: here4search.biz
10:36 PM: The Spy Communication shield has blocked access to: here4search.biz
********
7:13 PM: | Start of Session, Wednesday, June 21, 2006 |
7:13 PM: Spy Sweeper started
7:14 PM: Error: Failed to set data for 'Start Page'.
7:14 PM: Error: Failed to set data for 'Start Page'.
7:16 PM: | End of Session, Wednesday, June 21, 2006 |

And here is the hijackthis log

Logfile of HijackThis v1.99.1
Scan saved at 10:43:17 PM, on 6/21/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\EarthLink TotalAccess\Spyware Blocker\WRSSSDK.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\EarthLink TotalAccess\Spyware Blocker\SpySweeper.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\explorer.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.earthlink.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.pvponline.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/...://my.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided by Cox High Speed Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: SrchHook Class - {44F9B173-041C-4825-A9B9-D914BD9DCBB3} - C:\Program Files\EarthLink TotalAccess\elnIE.dll
R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - {17796EDC-A34E-82EE-4AB3-A6BFAB8DD790} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O3 - Toolbar: EarthLink Toolbar - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1123
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.com/.../ymmapi_416.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\EarthLink TotalAccess\Spyware Blocker\WRSSSDK.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

#4 MFDnSC

MFDnSC

    Ret. Director I/T


  • Members
  • 4,310 posts
  • OFFLINE
  •  
  • Local time:10:43 AM

Posted 22 June 2006 - 07:51 AM

You may want to print this or save it to notepad as we will go to safe mode.

Add remove programs – remove all occurrences of Viewpoint

Fix these with HJT – mark them, close IE, click fix checked

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com

R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)

R3 - URLSearchHook: (no name) - {17796EDC-A34E-82EE-4AB3-A6BFAB8DD790} - (no file)

O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll

O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML

O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1123

DownLoad http://www.downloads.subratam.org/KillBox.zip

Restart your computer into safe mode now. (Tapping F8 at the first black screen) Perform the following steps in safe mode:

Double-click on Killbox.exe to run it. Now put a tick by Standard File Kill. In the "Full Path of File to Delete" box, copy and paste each of the following lines one at a time then click on the button that has the red circle with the X in the middle after you enter each file. It will ask for confimation to delete the file. Click Yes. Continue with that same procedure until you have copied and pasted all of these in the "Paste Full Path of File to Delete" box.

C:\Program Files\Viewpoint

Note: It is possible that Killbox will tell you that one or more files do not exist. If that happens, just continue on with all the files. Be sure you don't miss any.

START – RUN – type in %temp% OK - Edit – Select all – File – Delete

Delete everything in the C:\Windows\Temp folder or C:\WINNT\temp

Not all temp files will delete and that is normal
Empty the recycle bin
Boot and post a new log from normal NOT safe mode

Please give feedback on what worked/didn’t work and the current status of your system
"Nothing could be finer than to be in South Carolina ............"

Member ASAP

#5 Kornholio EFX

Kornholio EFX
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:43 AM

Posted 22 June 2006 - 04:30 PM

I did all that, and here's the next Hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 2:17:05 PM, on 6/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\EarthLink TotalAccess\Spyware Blocker\WRSSSDK.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.earthlink.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.pvponline.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/...://my.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided by Cox High Speed Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: SrchHook Class - {44F9B173-041C-4825-A9B9-D914BD9DCBB3} - C:\Program Files\EarthLink TotalAccess\elnIE.dll
F2 - REG:system.ini: UserInit=userinit.exe
O3 - Toolbar: EarthLink Toolbar - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.com/.../ymmapi_416.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\EarthLink TotalAccess\Spyware Blocker\WRSSSDK.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe



Viewpoint seems to be gone now. But that prosearch page is still there. I also ran that Webroot program again beforee I saw this last reply, and it found more trojans, and said it deleted them. I believe if I were to run the program again, it would find trojans again.

Also, the "C:\WINDOWS\temp\win**.tmp.exe" windows are still there. Something keeps creating new iterations of this .exe file. Is there anyway to track what's creating them?

#6 Kornholio EFX

Kornholio EFX
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:43 AM

Posted 22 June 2006 - 04:44 PM

Also everytime I open the windows folder, Internet Explorer tries to open. I've blocked iexlporer.exe from accessing anything (I'm only using firefox to access the internet right now), and when it get blocked, windows asks me if I want to send an error report to mirosoft, I click no, and then dumprep.exe locks up.

Here's some info on these iterations of "C:\WINDOWS\temp\win**.tmp.exe":

Description = Microsoft MediaLoad
Copyright = Copyright © 2006

File Version = 2, 0, 3 7
Internal Name = MediaLoad
Language = Dutch(Netherlands)
Original File Name = MediaLoad.exe
Product Name = MediaLoad Application
Product Version = 2, 0, 3, 0

A search for any file with "mediaload" in the name came up with nothing. I was hoping to find the source of this files.

#7 MFDnSC

MFDnSC

    Ret. Director I/T


  • Members
  • 4,310 posts
  • OFFLINE
  •  
  • Local time:10:43 AM

Posted 22 June 2006 - 04:48 PM

DownLoad EasyCleaner http://www.majorgeeks.com/download414.html

Use the clear files and Unnecessary files buttons – I do not recommend
using the Duplicates files button
as many dupes are there on purpose.

Not all files will delete – that is normal.

In the unnecessary button I check the top 4 entries

=============

Spysweeper - check for updates = run it again

New log
"Nothing could be finer than to be in South Carolina ............"

Member ASAP

#8 Kornholio EFX

Kornholio EFX
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:43 AM

Posted 22 June 2006 - 07:53 PM

Spysweeper locked up when I tried to get its log, but It found a trojan and the adware for prosearch. The same ones that it found before. But here is the newest hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 5:51:11 PM, on 6/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\EarthLink TotalAccess\Spyware Blocker\WRSSSDK.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.earthlink.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.pvponline.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/...://my.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided by Cox High Speed Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: SrchHook Class - {44F9B173-041C-4825-A9B9-D914BD9DCBB3} - C:\Program Files\EarthLink TotalAccess\elnIE.dll
F2 - REG:system.ini: UserInit=userinit.exe
O3 - Toolbar: EarthLink Toolbar - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.com/.../ymmapi_416.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\EarthLink TotalAccess\Spyware Blocker\WRSSSDK.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

#9 MFDnSC

MFDnSC

    Ret. Director I/T


  • Members
  • 4,310 posts
  • OFFLINE
  •  
  • Local time:10:43 AM

Posted 23 June 2006 - 10:23 AM

Download the trial version of Ewido Security Suite http://www.ewido.net/en/download/ (W2K/XP Only)
· Install ewido.
· Run the application
· Click on scanner
· Click Complete System Scan and the scan will begin.
· When the scan is finished, Set all items to delete
· Apply all actions
· look at the bottom of the screen and click the Save report button.
· Save the report to your C: Drive
This will take some time to run!
Boot to normal mode
Post that log and a new HiJack log
"Nothing could be finer than to be in South Carolina ............"

Member ASAP

#10 Kornholio EFX

Kornholio EFX
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:43 AM

Posted 24 June 2006 - 02:18 PM

I don't think this worked completly, I'm getting random pop-ups from internet explorer still. First, I did a normal boot run of the Ewido scanner, then I did a safe mode run. The first run came up with this (and was uable to delete a trojan):

---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 8:29:23 PM 6/23/2006

+ Scan result:



HKLM\SOFTWARE\Classes\WinRes.WindowsResources -> Adware.CoolWebSearch : No action taken.
HKLM\SOFTWARE\Classes\WinRes.WindowsResources.1 -> Adware.CoolWebSearch : No action taken.
HKLM\SOFTWARE\Classes\WinRes.WindowsResources\CLSID -> Adware.CoolWebSearch : No action taken.
HKLM\SOFTWARE\Classes\WinRes.WindowsResources\CurVer -> Adware.CoolWebSearch : No action taken.
C:\Program Files\Cowabanga\Cowabanga.exe -> Adware.MediaTicket : No action taken.
C:\WINDOWS\Downloaded Program Files\YazzleActiveX.ocx -> Adware.MediaTickets : No action taken.
C:\WINDOWS\YAXUninst.exe -> Adware.MediaTickets : No action taken.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\ins -> Adware.WebRebates : No action taken.
C:\Documents and Settings\Ryan\Local Settings\Temporary Internet Files\Content.IE5\KPA785IZ\wizp32[1].exe -> Downloader.IstBar.eq : No action taken.
C:\WINDOWS\temp\win15.tmp.exe -> Downloader.IstBar.eq : No action taken.
C:\WINDOWS\winres.dll -> Downloader.IstBar.ff : No action taken.
C:\Documents and Settings\Ryan\Local Settings\Application Data\82200e66.exe -> Downloader.Obfuscated.a : No action taken.
C:\Documents and Settings\Ryan\Local Settings\Temporary Internet Files\Content.IE5\G1ERURGD\wlzip32[1].exe -> Downloader.Obfuscated.a : No action taken.
C:\WINDOWS\system32\82200e66.exe -> Downloader.Obfuscated.a : No action taken.
C:\WINDOWS\temp\winB.tmp.exe -> Downloader.Obfuscated.a : No action taken.
C:\Program Files\Common Files\Y1123OA.exe -> Downloader.PurityScan.cq : No action taken.
C:\Program Files\Common Files\ѕymbols\wuauboot.exe -> Downloader.PurityScan.cq : No action taken.
C:\RECYCLER\S-1-5-21-1060284298-1844823847-839522115-1003\Dc1434.exe -> Downloader.PurityScan.cq : No action taken.
C:\WINDOWS\system32\oins.exe -> Dropper.Small : No action taken.
C:\Documents and Settings\Ryan\Local Settings\Temporary Internet Files\Content.IE5\TCDHFPPF\wizip32[1].exe -> Hijacker.Small.kx : No action taken.
:mozilla.161:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.162:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.163:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.164:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.165:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.166:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.167:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.168:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.169:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.170:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.171:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.172:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.173:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.174:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.175:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.176:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.177:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.178:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.179:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.180:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.181:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.182:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.183:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.184:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.185:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.186:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.187:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.188:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.189:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.190:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.191:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.192:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.193:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.194:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.195:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.196:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.197:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.198:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.199:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.200:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.201:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.202:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.203:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.204:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.205:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.206:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.207:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.208:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.209:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.210:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.211:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.6:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.7:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.235:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.872:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adjuggler : No action taken.
:mozilla.873:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adjuggler : No action taken.
:mozilla.456:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.862:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.863:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.864:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.865:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.25:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.26:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.27:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.28:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.29:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.11:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.919:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Burstbeacon : No action taken.
:mozilla.17:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.329:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.331:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.332:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.20:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Centrport : No action taken.
:mozilla.21:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Centrport : No action taken.
:mozilla.589:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Clickzs : No action taken.
:mozilla.590:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Clickzs : No action taken.
:mozilla.776:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Clickzs : No action taken.
:mozilla.777:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Clickzs : No action taken.
:mozilla.531:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.532:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.291:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Coremetrics : No action taken.
C:\Documents and Settings\Ryan\Cookies\ryan@cpvfeed[1].txt -> TrackingCookie.Cpvfeed : No action taken.
:mozilla.806:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Cqcounter : No action taken.
:mozilla.30:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.252:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.253:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.254:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.255:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.424:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.426:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.430:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.355:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.356:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.357:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.342:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.343:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.344:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.394:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.395:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.396:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.877:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.878:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.879:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.364:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Masterstats : No action taken.
:mozilla.105:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.135:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.136:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.139:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.70:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.71:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.72:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.73:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.74:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.75:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.76:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.711:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.712:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.715:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.713:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Paycounter : No action taken.
:mozilla.714:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Paycounter : No action taken.
:mozilla.347:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.348:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.349:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.350:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.727:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Qksrv : No action taken.
:mozilla.728:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Qksrv : No action taken.
:mozilla.729:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Qksrv : No action taken.
:mozilla.119:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.120:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.121:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.122:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.735:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Revenue : No action taken.
:mozilla.397:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.398:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.399:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.400:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.401:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.402:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.403:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.404:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.100:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.101:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.102:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.103:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.104:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.98:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.99:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.540:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.541:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.542:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.543:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.544:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.545:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.546:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.547:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.548:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.549:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.550:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.551:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.552:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.553:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.554:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.555:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.556:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.557:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.558:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.559:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.560:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.561:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.562:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.563:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.564:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.565:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.566:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.567:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.568:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.569:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.570:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.571:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.572:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.573:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.574:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.575:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.576:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.577:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.578:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.579:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.580:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.581:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.582:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.583:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.584:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.585:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.586:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.587:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.588:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.314:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.315:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.316:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.386:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.387:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.388:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.389:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.390:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.31:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.32:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.33:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.34:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.35:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.36:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.37:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.38:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.39:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.40:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.41:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.42:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.43:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.44:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.44:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.45:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.46:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.47:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.48:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.49:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.50:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.51:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.52:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.53:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.54:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.55:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.56:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.57:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.58:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.59:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.60:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.61:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.62:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.63:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.64:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.65:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.66:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.67:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.68:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.69:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.70:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.71:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.72:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.73:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.74:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.75:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.76:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.77:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.78:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.79:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.148:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.149:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.150:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.151:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.152:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.153:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.236:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.237:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.238:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.239:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.240:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.241:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.242:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.243:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.299:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.300:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.301:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.307:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.309:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.310:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.36:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.37:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.38:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.783:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.313:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Weborama : No action taken.
:mozilla.227:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Webtrendslive : No action taken.
:mozilla.228:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.229:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.230:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.231:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.232:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.233:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.234:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.265:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.266:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.267:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.57:C:\Documents and Settings\Ryan\Application Data\Mozilla\Profiles\default\02iteutk.slt\cookies.txt -> TrackingCookie.Zedo : No action taken.
C:\WINDOWS\system32\winbjv32.dll -> Trojan.Agent.vg : No action taken.
[696] C:\WINDOWS\system32\winbjv32.dll -> Trojan.Agent.vg : No action taken.
C:\Documents and Settings\Ryan\Local Settings\Temporary Internet Files\Content.IE5\KPA785IZ\bgates[1].exe -> Trojan.Dialer.pz : No action taken.
C:\RECYCLER\S-1-5-21-1060284298-1844823847-839522115-1003\Dc3101.exe -> Trojan.Dialer.pz : No action taken.
C:\WINDOWS\temp\win8E.tmp.exe -> Trojan.Dialer.pz : No action taken.
C:\WINDOWS\temp\winBC.tmp.exe -> Trojan.Dialer.pz : No action taken.
C:\WINDOWS\system32\1024 -> Trojan.Small : No action taken.


::Report end



Then I ran it under safe mode (it deleted everything, including two trojans):

---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 11:32:49 AM 6/24/2006

+ Scan result:



:mozilla.360:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.361:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.362:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.363:C:\Documents and Settings\Ryan\Applica

#11 Kornholio EFX

Kornholio EFX
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:43 AM

Posted 24 June 2006 - 02:20 PM

Then I ran it under safe mode (it deleted everything, including two trojans):

---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 11:32:49 AM 6/24/2006

+ Scan result:



:mozilla.360:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.361:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.362:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.363:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.364:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.365:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.366:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.367:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.368:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.369:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.370:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.371:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.372:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.373:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.374:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.375:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.376:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.377:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.378:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.379:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.380:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.381:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.382:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.383:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.384:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.385:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.386:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.387:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.388:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.389:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.390:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.391:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.392:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.393:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.394:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.395:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.396:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.397:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.398:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.399:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.400:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.401:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.402:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.403:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.404:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.405:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.406:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.407:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.408:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.409:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.410:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.14:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adbrite : No action taken.
:mozilla.140:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Addynamix : No action taken.
:mozilla.141:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Addynamix : No action taken.
:mozilla.142:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Addynamix : No action taken.
:mozilla.944:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adjuggler : No action taken.
:mozilla.560:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.934:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.935:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.936:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.937:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Adrevolver : No action taken.
:mozilla.297:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.298:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.299:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.300:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.301:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.35:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.472:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.474:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.475:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.71:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.72:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.73:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.74:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.75:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.76:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.217:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Clickhype : No action taken.
:mozilla.688:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Clickzs : No action taken.
:mozilla.689:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Clickzs : No action taken.
:mozilla.852:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Clickzs : No action taken.
:mozilla.853:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Clickzs : No action taken.
:mozilla.285:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.286:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.450:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Coremetrics : No action taken.
:mozilla.882:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Cqcounter : No action taken.
:mozilla.23:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.31:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.32:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.33:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.34:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.538:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.540:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.544:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.16:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.19:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.20:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.21:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.22:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.481:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.482:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.483:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.520:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.521:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.522:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Liveperson : No action taken.
:mozilla.490:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Masterstats : No action taken.
:mozilla.147:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.343:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.344:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.345:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.36:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.37:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.797:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Overture : No action taken.
:mozilla.795:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Paycounter : No action taken.
:mozilla.796:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Paycounter : No action taken.
:mozilla.302:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.303:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.304:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.305:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
C:\Documents and Settings\Ryan\Cookies\ryan@ads.pointroll[2].txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.246:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Qksrv : No action taken.
:mozilla.247:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Qksrv : No action taken.
:mozilla.248:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Qksrv : No action taken.
:mozilla.267:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.268:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.269:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.270:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Questionmarket : No action taken.
:mozilla.814:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Revenue : No action taken.
:mozilla.39:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.40:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.41:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.42:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.43:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.44:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.45:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.46:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Ru4 : No action taken.
:mozilla.195:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.196:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.197:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.198:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.199:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.200:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.201:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Serving-sys : No action taken.
:mozilla.639:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.640:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.641:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.642:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.643:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.644:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.645:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.646:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.647:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.648:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.649:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.650:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.651:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.652:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.653:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.654:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.655:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.656:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.657:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.658:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.659:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.660:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.661:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.662:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.663:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.664:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.665:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.666:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.667:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.668:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.669:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.670:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.671:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.672:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.673:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.674:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.675:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.676:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.677:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.678:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.679:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.680:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.681:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.682:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.683:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.684:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.685:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.686:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.687:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.457:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.458:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.459:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Smartadserver : No action taken.
:mozilla.512:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.513:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.514:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.515:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.516:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.100:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.101:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.102:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.103:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.104:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.105:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.106:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.107:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.108:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.109:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.110:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.111:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.112:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.113:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.114:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.115:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.116:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.117:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.118:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.119:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.120:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.121:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.122:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.123:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.124:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.125:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.126:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.127:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.128:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.129:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.130:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.131:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.132:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.133:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.134:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.135:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.136:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.137:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.138:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.139:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.91:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.92:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.93:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.94:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.95:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.96:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.97:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.98:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.99:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.348:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.349:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.350:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.351:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.352:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.64:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.65:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.66:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.67:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.68:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.69:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.70:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.78:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.152:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.153:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.154:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.155:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.156:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.157:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.454:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.169:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.172:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.183:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.184:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.185:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.186:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.859:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.456:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Weborama : No action taken.
:mozilla.425:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Webtrendslive : No action taken.
:mozilla.54:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.56:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.57:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.58:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.59:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.60:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.61:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.62:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.63:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.77:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.431:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.432:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.433:C:\Documents and Settings\Ryan\Application Data\Mozilla\Firefox\Profiles\bpglsaie.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
C:\Documents and Settings\Ryan\Local Settings\Temporary Internet Files\Content.IE5\UQ61HDSY\bgates[1].exe -> Trojan.Dialer.pz : No action taken.
C:\WINDOWS\system32\1024 -> Trojan.Small : No action taken.


::Report end

Here is the new hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 11:48:52 AM, on 6/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\EarthLink TotalAccess\Spyware Blocker\WRSSSDK.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Real\RealPlayer\realplay.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54GSv2.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.earthlink.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.pvponline.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapps.yahoo.com/customize/...://my.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided by Cox High Speed Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: SrchHook Class - {44F9B173-041C-4825-A9B9-D914BD9DCBB3} - C:\Program Files\EarthLink TotalAccess\elnIE.dll
F2 - REG:system.ini: UserInit=userinit.exe
O3 - Toolbar: EarthLink Toolbar - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - C:\Program Files\EarthLink TotalAccess\PnEL.dll
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [82200e66.exe] C:\Documents and Settings\Ryan\Local Settings\Application Data\82200e66.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name)

#12 MFDnSC

MFDnSC

    Ret. Director I/T


  • Members
  • 4,310 posts
  • OFFLINE
  •  
  • Local time:10:43 AM

Posted 24 June 2006 - 02:31 PM

Try Spysweeper again

That was not the full Hijack log

In firefox - TOOLS - OPTIONS - PRIVACY - COOKIES - Check originating site only
"Nothing could be finer than to be in South Carolina ............"

Member ASAP




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users