Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Myway.mywebsearch


  • Please log in to reply
19 replies to this topic

#1 rainbow_warrior

rainbow_warrior

  • Members
  • 90 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Newark, Delaware
  • Local time:11:51 AM

Posted 11 February 2007 - 10:38 PM

My parents' computer has always seemed a bit slow. Spybot found MyWay.MyWebSearch, which it had found before and removed. Adaware only found tracking cookies. Housecall found FunWebproducts. It also complains about this Vector Markup Language vulnerability, but the patch from microsoft says it is the wrong version of internet explorer. Actually, I let it install a new version of internet explorer before I ran Housecall. I ran Stinger but found nothing. I ran ATF cleaner, but I see there are a lot of TEMP files which it didn't find. Here is HJT log. Can you see a problem? Thanks for your help.

Logfile of HijackThis v1.99.1
Scan saved at 10:26:08 PM, on 2/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\CHANDLER\System32\smss.exe
C:\CHANDLER\system32\winlogon.exe
C:\CHANDLER\system32\services.exe
C:\CHANDLER\system32\lsass.exe
C:\CHANDLER\system32\svchost.exe
C:\CHANDLER\System32\svchost.exe
C:\CHANDLER\system32\ZoneLabs\vsmon.exe
C:\CHANDLER\system32\devldr32.exe
C:\CHANDLER\Explorer.EXE
C:\CHANDLER\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\CHANDLER\System32\CTsvcCDA.EXE
C:\CHANDLER\System32\HPZipm12.exe
C:\CHANDLER\System32\svchost.exe
C:\CHANDLER\wanmpsvc.exe
C:\CHANDLER\System32\MsPMSPSv.exe
C:\Program Files\Common Files\AOL\1105218204\ee\AOLSoftware.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\CHANDLER\system32\ctfmon.exe
C:\DOCUME~1\MARGAR~1\LOCALS~1\Temp\20061126192129_mcinfo.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\CHANDLER\system32\wscntfy.exe
C:\CHANDLER\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Documents and Settings\margaret chandler\Desktop\stng260.exe
C:\Program Files\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O3 - Toolbar: (no name) - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1105218204\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\CHANDLER\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk.disabled
O4 - Global Startup: HP Digital Imaging Monitor.lnk.disabled
O4 - Global Startup: Microsoft Office.lnk.disabled
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk.disabled
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/...zeb004YYUS_none
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Help - {426CBD85-E4B0-4AD9-A32F-0FE091E0065D} - http://www.comcast.net/memberservices/ (file missing) (HKCU)
O9 - Extra button: Support - {5291370D-B062-4409-9E23-FFC5F4D11032} - http://www.comcastsupport.com (file missing) (HKCU)
O9 - Extra button: ComcastHSI - {5BD70775-5445-45A7-BA4E-B065D215635A} - http://www.comcast.net (file missing) (HKCU)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - https://objects.aol.com/mcafee/molbin/share...83/mcinsctl.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\CHANDLER\System32\CTsvcCDA.EXE
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\CHANDLER\System32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\CHANDLER\system32\ZoneLabs\vsmon.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\CHANDLER\wanmpsvc.exe

BC AdBot (Login to Remove)

 


m

#2 RichieUK

RichieUK

    Malware Assassin


  • Malware Response Team
  • 13,614 posts
  • OFFLINE
  •  
  • Local time:05:51 PM

Posted 12 February 2007 - 04:55 AM

Welcome rainbow_warrior :thumbsup:

Please disable Spybot S&D’s protection,or it will interfere.
You can enable it after you're clean.
Open Spybot and click on 'Mode' and check 'Advanced Mode'.
Click on 'Tools' in bottom left hand corner.
Click on the 'System Startup' icon.
Uncheck 'Teatimer' box and/or uncheck 'Resident'.
Click the 'Allow Change' box.
Then, check next to the computer clock to see if the icon for Spybot is still there.
If it is, right click it and choose 'exit Spybot-S&D Resident'.
Reboot the computer.

=====================

Have Hijack This fix the following by placing a check in the appropriate boxes and selecting 'Fix checked'.
Make sure all browser and all Windows Explorer windows are closed before fixing:
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/...zeb004YYUS_none
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Help - {426CBD85-E4B0-4AD9-A32F-0FE091E0065D} - http://www.comcast.net/memberservices/ (file missing) (HKCU)
O9 - Extra button: Support - {5291370D-B062-4409-9E23-FFC5F4D11032} - http://www.comcastsupport.com (file missing) (HKCU)
O9 - Extra button: ComcastHSI - {5BD70775-5445-45A7-BA4E-B065D215635A} - http://www.comcast.net (file missing) (HKCU)

Exit Hijackthis.

=====================

Download\install CleanUp.
Launch CleanUp,then click on 'Options'.
Now move the slider on the left up to 'Standard Cleanup!'.
Click 'Ok',now run the program by clicking on the 'Cleanup' button.
Reboot,or log off/log on when it's finished.

=====================

Download\install 'SuperAntiSpyware Home Edition Free Version' from here:
http://www.superantispyware.com/downloadfi...ANTISPYWAREFREE

Launch SuperAntiSpyware and click on 'Check for updates'.
Once the updates have been installed,on the main screen click on 'Scan your computer'.
Check: 'Perform Complete Scan'.
Click 'Next' to start the scan.

Superantispyware will now scan your computer,when it's finished it will list all/any infections found.
Make sure everything found has a checkmark next to it,then press 'Next'.
Click on 'Finish' when you've done.

It's possible that the program will ask you to reboot in order to delete some files.

Obtain the SuperAntiSpyware log as follows:
Click on 'Preferences'.
Click on the 'Statistics/Logs' tab.
Under 'Scanner Logs' double click on 'SuperAntiSpyware Scan Log'.
It will then open in your default text editor,such as Notepad.
Copy and paste the contents of that report into your next reply.
Also post a new Hijackthis log,let me know how your pc is running now.

Posted Image
Posted Image

#3 rainbow_warrior

rainbow_warrior
  • Topic Starter

  • Members
  • 90 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Newark, Delaware
  • Local time:11:51 AM

Posted 12 February 2007 - 09:54 PM

Hi RichieUK

Thanks for your help. I guess I could have found that registry last night, but I had to hurry up because my parents were going to bed. While Superantispyware is running, I will type a few other concerns. I guess we can let you know in a few days whether we see any general change in how the computer is running. The HJT log will be at the bottom, following AVG AS log. SAS is slow, and I guess I will leave it to scan overnight. It is just starting Documents and Settings.

Thanks again
David (rainbow_warrior)

In Add/Remove programs--aol uninstaller, it lists two that ran today: AOL Connectivity Service in
Program Files\Common Files\AOL\ACS ; and Computer Check-Up 4.0 in
Program Files\AOL\AOL Computer Check-Up.lnk . I think connectivity service is just a fancy name for a newer version. You can click ``check for older versions of aol,'' and you find AOL, two versions of AOL 8.0, and two of AOL 6.0, with last used ranging from 2003 to Christmas, 2006. There are also AOL Coach Version 1 and 2, and aol toolbar and aol deskbar listed as separate entries in the uninstall list (without last-used dates). Should I remove all the old ones, or just not worry about it?

What are PC100 and PC101 (in the uninstall list and Program Files), and PC110 (just Program Files)?

Are the 03 Toolbar entries with no name and no file, in the HJT log, legitimate?

There was a startup entry for msci---McAfee Security Center---which may be related to AOL. Yesterday I removed the aol antispyware, having previously removed the aol antivirus and firewalls. The antispyware seemed like it might be slowing the computer on each startup, and it didn't alert my mom to the myway.mywebsearch problem. Every few minutes, the teatimer reported that the entry was reset; so I blocked it and told teatimer to remember. Tonight the entry has not been reset.

In system startup, there is ctfmon.exe in c:\\chandler\system32 . The Paul Collins advice in Spybot calls it not required/coolwebsearch related, but I think that is a mistake which was never corrected. The entry is still checked.

There are a bunch of white-coded (no information) startup entries at the bottom, all System.ini, all checked. I guess they belong to the system, but I don't know:

crypt32chain crypt32.dll
cryptnet cryptnet.dll
cscdll cscdll.dll
ScCertProp wlnotify.dll
Schedule wlnotify.dll
sclgntfy sclgntfy.dll
SensLogn WlNotify.dll
termsrv wlnotify.dll
wlballoon wlnotify.dll

Are they all required, and do they slow down startup?

Overnight I let AVG Antispyware (free edition) run. It found a lot of ``backup'' cookies and could not remove them. the 207 cookies seem to be aol-related spyware. Every time adaware runs, I think it finds a regular ie 207 tracking cookie, but not a backup. Here is the scan a saved from AVG AS:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 7:39:17 PM 2/12/2007

+ Scan result:



:mozilla.10:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.10:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.11:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.11:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.11:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.12:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.12:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.12:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.13:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.13:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.13:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.14:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.14:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.14:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.155:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.156:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.157:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.157:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.158:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.158:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.159:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.159:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.15:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.15:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.15:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.160:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.160:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.161:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.161:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.162:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.162:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.163:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.163:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.164:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.164:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.165:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.165:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.166:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.167:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.16:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.16:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.16:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.17:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.17:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.17:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.18:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.18:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.18:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.19:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.19:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.19:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.20:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.20:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.20:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.21:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.21:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.21:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.21:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.22:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.22:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.22:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.22:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.23:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.23:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.23:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.23:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.24:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.24:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.24:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.25:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.25:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.26:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.26:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.27:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.27:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.28:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.29:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.30:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.30:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.31:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.31:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.32:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.32:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.33:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.33:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.38:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.38:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.39:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.39:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.40:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.40:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.41:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.42:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.42:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.42:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.43:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.43:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.44:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.44:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.48:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.49:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.50:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.6:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\dllorq45.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.6:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.7:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\dllorq45.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.7:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.80:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.81:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.82:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.82:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.83:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.83:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.84:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.84:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.85:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.85:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.86:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.86:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.87:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.87:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.88:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.88:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.89:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.8:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.90:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.9:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.2o7 : Error during cleaning.
:mozilla.22:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Adserver : Error during cleaning.
:mozilla.23:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Adserver : Error during cleaning.
:mozilla.24:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Adserver : Error during cleaning.
:mozilla.25:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Adserver : Error during cleaning.
:mozilla.79:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Adserver : Error during cleaning.
:mozilla.80:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Adserver : Error during cleaning.
:mozilla.81:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Adserver : Error during cleaning.
:mozilla.82:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Adserver : Error during cleaning.
:mozilla.86:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Adserver : Error during cleaning.
:mozilla.88:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Adserver : Error during cleaning.
:mozilla.88:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Adserver : Error during cleaning.
:mozilla.90:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Adserver : Error during cleaning.
:mozilla.10:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.117:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.118:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.119:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.119:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.120:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.121:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.25:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.26:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.27:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.28:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.34:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.34:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.35:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.35:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.36:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.36:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.37:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.37:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.38:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.39:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.40:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.41:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.41:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.42:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.42:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.43:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.43:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.43:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.44:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.44:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.44:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.45:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.45:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.46:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.47:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.55:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.56:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.57:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.58:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.58:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.59:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.60:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.61:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Advertising : Error during cleaning.
:mozilla.45:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Atdmt : Error during cleaning.
:mozilla.51:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Atdmt : Error during cleaning.
:mozilla.59:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Atdmt : Error during cleaning.
:mozilla.8:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Atdmt : Error during cleaning.
:mozilla.94:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Atdmt : Error during cleaning.
:mozilla.96:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Atdmt : Error during cleaning.
:mozilla.126:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Bluestreak : Error during cleaning.
:mozilla.128:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Bluestreak : Error during cleaning.
:mozilla.161:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Bluestreak : Error during cleaning.
:mozilla.162:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Bluestreak : Error during cleaning.
:mozilla.163:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Bluestreak : Error during cleaning.
:mozilla.164:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Bluestreak : Error during cleaning.
:mozilla.136:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Bridgetrack : Error during cleaning.
:mozilla.137:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Bridgetrack : Error during cleaning.
:mozilla.139:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Bridgetrack : Error during cleaning.
:mozilla.139:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Bridgetrack : Error during cleaning.
:mozilla.140:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Bridgetrack : Error during cleaning.
:mozilla.140:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Bridgetrack : Error during cleaning.
:mozilla.95:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Bridgetrack : Error during cleaning.
:mozilla.96:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Bridgetrack : Error during cleaning.
:mozilla.97:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Bridgetrack : Error during cleaning.
:mozilla.97:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Bridgetrack : Error during cleaning.
:mozilla.98:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Bridgetrack : Error during cleaning.
:mozilla.99:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Bridgetrack : Error during cleaning.
:mozilla.151:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Centrport : Error during cleaning.
:mozilla.152:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Centrport : Error during cleaning.
:mozilla.153:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Centrport : Error during cleaning.
:mozilla.154:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Centrport : Error during cleaning.
:mozilla.172:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Centrport : Error during cleaning.
:mozilla.173:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Centrport : Error during cleaning.
:mozilla.173:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Centrport : Error during cleaning.
:mozilla.174:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Centrport : Error during cleaning.
:mozilla.183:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Centrport : Error during cleaning.
:mozilla.184:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Centrport : Error during cleaning.
:mozilla.186:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Centrport : Error during cleaning.
:mozilla.187:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Centrport : Error during cleaning.
:mozilla.20:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Doubleclick : Error during cleaning.
:mozilla.29:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Doubleclick : Error during cleaning.
:mozilla.54:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Doubleclick : Error during cleaning.
:mozilla.6:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Doubleclick : Error during cleaning.
:mozilla.7:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Doubleclick : Error during cleaning.
:mozilla.7:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Doubleclick : Error during cleaning.
:mozilla.135:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Falkag : Error during cleaning.
:mozilla.137:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Falkag : Error during cleaning.
:mozilla.167:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Falkag : Error during cleaning.
:mozilla.168:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Falkag : Error during cleaning.
:mozilla.169:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Falkag : Error during cleaning.
:mozilla.170:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Falkag : Error during cleaning.
:mozilla.7:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Hitbox : Error during cleaning.
:mozilla.106:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Overture : Error during cleaning.
:mozilla.109:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Overture : Error during cleaning.
:mozilla.113:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Overture : Error during cleaning.
:mozilla.114:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Overture : Error during cleaning.
:mozilla.55:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Overture : Error during cleaning.
:mozilla.57:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Overture : Error during cleaning.
:mozilla.113:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.114:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.115:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.115:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.116:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.116:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.117:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.118:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.153:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.154:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.154:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.155:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.155:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.155:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.156:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.156:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.156:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.156:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.157:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.157:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.157:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.158:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.158:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.159:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Pointroll : Error during cleaning.
:mozilla.107:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Questionmarket : Error during cleaning.
:mozilla.110:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Questionmarket : Error during cleaning.
:mozilla.114:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Questionmarket : Error during cleaning.
:mozilla.115:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Questionmarket : Error during cleaning.
:mozilla.56:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Questionmarket : Error during cleaning.
:mozilla.58:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Questionmarket : Error during cleaning.
:mozilla.55:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.56:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.57:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.58:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.59:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.60:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.61:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.62:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.63:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.68:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.69:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.70:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.70:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.71:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.71:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.72:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.73:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Realmedia : Error during cleaning.
:mozilla.136:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Ru4 : Error during cleaning.
:mozilla.138:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Ru4 : Error during cleaning.
:mozilla.168:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Ru4 : Error during cleaning.
:mozilla.169:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Ru4 : Error during cleaning.
:mozilla.170:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Ru4 : Error during cleaning.
:mozilla.171:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Ru4 : Error during cleaning.
:mozilla.102:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.103:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.104:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.104:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.105:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.106:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.107:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.108:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.108:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.110:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.111:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.111:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.111:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.112:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.112:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.113:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.115:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.116:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.142:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.143:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.144:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.145:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.52:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.53:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.54:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.54:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.55:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.56:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.57:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.59:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning.
:mozilla.47:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Tribalfusion : Error during cleaning.
:mozilla.48:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Tribalfusion : Error during cleaning.
:mozilla.53:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Tribalfusion : Error during cleaning.
:mozilla.61:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Tribalfusion : Error during cleaning.
:mozilla.63:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Tribalfusion : Error during cleaning.
:mozilla.10:C:\Program Files\Support.com\backup\Co\cookies.txt\15104_5a98b8a19_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.10:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.11:C:\Program Files\Support.com\backup\Co\cookies.txt\15265_5477188db_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.51:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.52:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.56:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.57:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.64:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.65:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.66:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.67:C:\Program Files\Support.com\backup\Co\cookies.txt\17533_52bc6a84c_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.68:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.69:C:\Program Files\Support.com\backup\Co\cookies.txt\17682_5c5f1b655_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.71:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.72:C:\Program Files\Support.com\backup\Co\cookies.txt\17844_525b77363_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.79:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b39958ef_/cookies.txt -> TrackingCookie.Webtrendslive : Error during cleaning.
:mozilla.80:C:\Program Files\Support.com\backup\Co\cookies.txt\17004_5b

#4 rainbow_warrior

rainbow_warrior
  • Topic Starter

  • Members
  • 90 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Newark, Delaware
  • Local time:11:51 AM

Posted 15 February 2007 - 12:57 PM

Hi RichieUK

We had a pretty big ice storm. So I haven't been back to my parents' computer, but I talked to my mom on the phone. SAS reported no harmful items found. I could look for the report next time if you need to look at a report for not finding anything. She reports the computer running all right before and after the registry changes. I guess it means the startup and logon process is still a bit slow. I don't know if having only 256M of RAM is a factor in slow windows startup.

Do I need to create a new restore point?

David

#5 RichieUK

RichieUK

    Malware Assassin


  • Malware Response Team
  • 13,614 posts
  • OFFLINE
  •  
  • Local time:05:51 PM

Posted 19 February 2007 - 08:27 PM

Download and scan with the free 15 day trial of Counterspy
Once installed launch Counterspy.
Click on 'Spyware Scan',then click 'Updates' at the top right.
Once any available updates have been installed,click the 'Scan Now' button.
Save the report when it's finished:
1.Once Counterspy has done scanning,the 'Scan Results' box will appear.
2.Click on 'View Results'.
3.Under (Recommended Action),using the drop down menus at the side of each entry found,set EVERYTHING to 'Remove'.
4.Then click on 'Take Action'.
5.Once everything has been removed,click on 'View Details'.
6.Copy and Paste those details into a Word/Text document,then save it to your desktop.

Reboot,post the Counterspy report and a new Hijackthis log please.
Let me know how the pc is running now.
Posted Image
Posted Image

#6 rainbow_warrior

rainbow_warrior
  • Topic Starter

  • Members
  • 90 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Newark, Delaware
  • Local time:11:51 AM

Posted 20 February 2007 - 10:44 PM

Hi RichieUK

The scan found ie tray. Counterspy is a little confusing when it first starts. It brings up an activation window, which seems to be to get you to buy it. I checked skip, but then I clicked on activate the real-time feature. It took about twenty minutes from starting to shut down to starting to type this, so I feel the machine is quite slow. Also it takes several minutes just when the screen goes to sleep to wake it up and log back in. Here are the scans.

**********************

Logfile of HijackThis v1.99.1
Scan saved at 10:36:41 PM, on 2/20/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\CHANDLER\System32\smss.exe
C:\CHANDLER\system32\winlogon.exe
C:\CHANDLER\system32\services.exe
C:\CHANDLER\system32\lsass.exe
C:\CHANDLER\system32\svchost.exe
C:\CHANDLER\System32\svchost.exe
C:\CHANDLER\system32\ZoneLabs\vsmon.exe
C:\CHANDLER\system32\devldr32.exe
C:\CHANDLER\Explorer.EXE
C:\CHANDLER\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\CHANDLER\System32\CTsvcCDA.EXE
C:\CHANDLER\System32\HPZipm12.exe
C:\Program Files\Sunbelt Software\CounterSpy\SBCSSvc.exe
C:\CHANDLER\System32\svchost.exe
C:\CHANDLER\wanmpsvc.exe
C:\CHANDLER\System32\MsPMSPSv.exe
C:\CHANDLER\system32\wuauclt.exe
C:\Program Files\Common Files\AOL\1105218204\ee\AOLSoftware.exe
C:\CHANDLER\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Sunbelt Software\CounterSpy\SBCSTray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\America Online 9.0d\waol.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\America Online 9.0d\shellmon.exe
C:\Program Files\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O3 - Toolbar: (no name) - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1105218204\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SBCSTray] C:\Program Files\Sunbelt Software\CounterSpy\SBCSTray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\CHANDLER\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\America Online 9.0d\AOL.EXE" -b
O4 - Global Startup: Adobe Reader Speed Launch.lnk.disabled
O4 - Global Startup: HP Digital Imaging Monitor.lnk.disabled
O4 - Global Startup: Microsoft Office.lnk.disabled
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk.disabled
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - https://objects.aol.com/mcafee/molbin/share...83/mcinsctl.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} -
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\CHANDLER\System32\CTsvcCDA.EXE
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\CHANDLER\System32\HPZipm12.exe
O23 - Service: Sunbelt CounterSpy Antispyware (SBCSSvc) - Sunbelt Software - C:\Program Files\Sunbelt Software\CounterSpy\SBCSSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\CHANDLER\system32\ZoneLabs\vsmon.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\CHANDLER\wanmpsvc.exe

******************************************

Scan History Details
Start Date: 2/20/2007 8:18:31 PM
End Date: 2/20/2007 10:02:34 PM
Total Time: 104 Min 3 Sec
Detected security risks

IETray Hijacker more information...
Details: IETray is a Browser helper Object that includes a side search bar in Internet Explorer.
Status: Deleted

Registry entries detected
HKEY_USERS\DEFINE
HKEY_USERS\DEFINE
HKEY_USERS\DEFINE


Cookie: PointRoll.com Cookie (General) more information...
Details: Cookies are small "data tags" that web sites store on PCs in order to recognize unique visitors. Cookies are used to identify returning visitors who have registered for special services; to measure and analyze visitors' use of web site features; to count unique visitors to web pages; and to allow web surfers to use virtual "shopping carts." Online advertising networks use cookies to track users across web sites and to measure ad impressions and click-throughs.
Status: Deleted

Cookies detected
c:\documents and settings\margaret chandler\cookies\margaret_chandler@ads.pointroll[2].txt


Cookie: QuestionMarket.com Cookie (General) more information...
Details: Cookies are small "data tags" that web sites store on PCs in order to recognize unique visitors. Cookies are used to identify returning visitors who have registered for special services; to measure and analyze visitors' use of web site features; to count unique visitors to web pages; and to allow web surfers to use virtual "shopping carts." Online advertising networks use cookies to track users across web sites and to measure ad impressions and click-throughs.
Status: Deleted

Cookies detected
c:\documents and settings\margaret chandler\cookies\margaret_chandler@questionmarket[1].txt

#7 RichieUK

RichieUK

    Malware Assassin


  • Malware Response Team
  • 13,614 posts
  • OFFLINE
  •  
  • Local time:05:51 PM

Posted 21 February 2007 - 04:32 AM

Please disable Spybot S&D’s protection,or it will interfere.
You can enable it after you're clean.
Open Spybot and click on 'Mode' and check 'Advanced Mode'.
Click on 'Tools' in bottom left hand corner.
Click on the 'System Startup' icon.
Uncheck 'Teatimer' box and/or uncheck 'Resident'.
Click the 'Allow Change' box.
Then, check next to the computer clock to see if the icon for Spybot is still there.
If it is, right click it and choose 'exit Spybot-S&D Resident'.
Reboot the computer.

***************************

Have Hijack This fix the following by placing a check in the appropriate boxes and selecting 'Fix checked'.
Make sure all browser and all Windows Explorer windows are closed before fixing:
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O3 - Toolbar: (no name) - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} -
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -


Exit Hijackthis,reboot,post a new Hijackthis log please.
Let me know how it's running now.
Posted Image
Posted Image

#8 rainbow_warrior

rainbow_warrior
  • Topic Starter

  • Members
  • 90 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Newark, Delaware
  • Local time:11:51 AM

Posted 24 February 2007 - 08:33 PM

Hi RichieUK

The computer seems to be getting slower. My mom even complained it was sluggish, which is unusual for her. Spybot took an hour to run and adaware was quite slow, neither finding anything except the usual aol-related ie cookies found by adaware. I unchecked the counterspy startup entry because it seemed to be using a lot of cpu during startup, but I didn't shut off the active counterspy until the adaware scan was almost done. This last reboot took almost 10 minutes before zone alarm, aol, avg, and teatimer all appeared in the tray, and then "my computer" took almost two minutes to come up to start hijack this from program files.

There were two startup entries I hadn't seen before, with blanks for what they are. The Paul Collins info says they are system32.exe added by the AGOBOT-KU WORM. I unchecked them.

Notice that four of the "fix checked" entries are back. I think I stopped at least one of the BHO entries from coming back by rejecting it in teatimer.

I deleted some .exe file from windows\TEMP, but I'm afraid I didn't write down the name. The remaining files are ZL .tmp files, but I didn't search through the subfolders.

Following is the new HJT log.

David

Logfile of HijackThis v1.99.1
Scan saved at 8:02:17 PM, on 2/24/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\CHANDLER\System32\smss.exe
C:\CHANDLER\system32\winlogon.exe
C:\CHANDLER\system32\services.exe
C:\CHANDLER\system32\lsass.exe
C:\CHANDLER\system32\svchost.exe
C:\CHANDLER\System32\svchost.exe
C:\CHANDLER\system32\ZoneLabs\vsmon.exe
C:\CHANDLER\system32\devldr32.exe
C:\CHANDLER\Explorer.EXE
C:\CHANDLER\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\CHANDLER\System32\CTsvcCDA.EXE
C:\CHANDLER\System32\HPZipm12.exe
C:\Program Files\Sunbelt Software\CounterSpy\SBCSSvc.exe
C:\CHANDLER\System32\svchost.exe
C:\CHANDLER\wanmpsvc.exe
C:\CHANDLER\System32\MsPMSPSv.exe
C:\CHANDLER\system32\wuauclt.exe
C:\CHANDLER\system32\ctfmon.exe
C:\Program Files\Common Files\AOL\1105218204\ee\AOLSoftware.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\America Online 9.0d\waol.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\hijack this\HijackThis.exe
C:\Program Files\America Online 9.0d\shellmon.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1105218204\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\CHANDLER\system32\ctfmon.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\America Online 9.0d\AOL.EXE" -b
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk.disabled
O4 - Global Startup: HP Digital Imaging Monitor.lnk.disabled
O4 - Global Startup: Microsoft Office.lnk.disabled
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk.disabled
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - https://objects.aol.com/mcafee/molbin/share...83/mcinsctl.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} -
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -
O20 - Winlogon Notify: WgaLogon - C:\CHANDLER\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\CHANDLER\System32\CTsvcCDA.EXE
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\CHANDLER\System32\HPZipm12.exe
O23 - Service: Sunbelt CounterSpy Antispyware (SBCSSvc) - Sunbelt Software - C:\Program Files\Sunbelt Software\CounterSpy\SBCSSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\CHANDLER\system32\ZoneLabs\vsmon.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\CHANDLER\wanmpsvc.exe

#9 RichieUK

RichieUK

    Malware Assassin


  • Malware Response Team
  • 13,614 posts
  • OFFLINE
  •  
  • Local time:05:51 PM

Posted 24 February 2007 - 08:58 PM

Please uninstall Spybot Search and Destroy via Add\Remove programs,then reboot.
You can reinstall it later when we've done.

*****************************

Ok,lets temporarily disable this service:
Click on Start>Run and type Services.msc then hit Ok.
Scroll down and find the service called:
McAfee Framework Service (McAfeeFramework)
When you find it, double-click on it.
In the next window that opens, click the 'Stop' button.
Then change the 'Startup Type:' to 'Disabled'.
Now press Apply and then Ok and close any open windows.

*****************************

Run 'BitDefender Online Scanner' using Internet Explorer:
http://www.bitdefender.com/scan8/ie.html
Read the 'END USER SOFTWARE LICENSE AGREEMENT' then click 'I agree'.
You'll be prompted to install the activex control,please do so.
Once installed click the 'Click here to scan' button.
The virus signatures will then load.
Once loaded the scan will start.
The scan will take quite some time so please be patient.
Once the scan has finished select the 'Detected Problems' tab.
Click on 'Click here to export scan'.
Save the file as an HTML file to your desktop.
Then click on the saved file and allow it to open with your browser.
Go to 'Edit'/'Select All' then copy and paste that log into your next reply.

*****************************

Have Hijack This fix the following [if still present],by placing a check in the appropriate boxes and selecting 'Fix checked'.
Make sure all browser and all Windows Explorer windows are closed before fixing:
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O3 - Toolbar: (no name) - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} -
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -


Exit Hijackthis,reboot,post the BitDefender Online Scan report,and a new Hijackthis log please.
Let me know how it's running now.

Edited by RichieUK, 24 February 2007 - 09:08 PM.

Posted Image
Posted Image

#10 rainbow_warrior

rainbow_warrior
  • Topic Starter

  • Members
  • 90 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Newark, Delaware
  • Local time:11:51 AM

Posted 26 February 2007 - 11:11 AM

Hi RichieUK

Before I got your reply, I had already deleted the four entries that had been deleted and come back in the HJT scan. I think they were not there when I started the BitDefender. The reboot I did after I redeleted seemed to be less slow.

BitDefender defender ran in 2 hours 40 minutes. My mom looked at the results, which said it found nothing. So I guess there was nothing to post from that.

We had another snow storm Sunday. I didn't go back yet to do another HJT scan.

I also did a manual windows update from the update page in ie, and I noticed that the little shield was in the tray that says updates are ready to install. The installation process was very slow, and I think I clicked on the icon, causing the installation window to come up maybe two extra times. As far as I could see, the update was just to check to make sure you don't have a bootleg version of windows, which I thought microsoft was already doing with XP, but maybe they are closing some loophole. Firefox also updated during that time. Could the updating process have triggered the registry entries coming back?

Also, the ZL .tmp files are not in the windows\temp folder (which I said in the last post) but in one of the local settings\temp folders. I think the .exe file I deleted was in windows\temp. The other files in windows\temp didn't look suspicious, although I didn't open the subfolders.

There are three activex files I found copies of each in two different local settings\downloaded program files folders. They are marked with web addresses from, I think, McAfee, aol, and microsoft. The status of two is marked unknown and the status of the third is damaged. I'm not sure there should be anything running from McAfee, since I uninstalled anything from McAfee and the aol security functions. The McAfee service was already marked as stopped when I opened it, but I changed the startup type from automatic to disabled. Stinger is on the desktop, but isn't that stand alone? The antivirus is AVG.

David

#11 RichieUK

RichieUK

    Malware Assassin


  • Malware Response Team
  • 13,614 posts
  • OFFLINE
  •  
  • Local time:05:51 PM

Posted 26 February 2007 - 11:17 AM

David,could you do the following please:

Download 'e Scan MWAV' from here to your desktop:
http://www.mwti.net/download/tools/mwav.exe
Disconnect from the internet,close all running programs.
Double click on the mwav icon on your desktop.
The program will start,the Licence Agreement will pop up.
Select 'I accept the agreement',then press Ok.
The program will open,leave all the settings as they are.
Now press the 'Scan & Clean' button.
The program will now start scanning your pc.
Once the scan has finished,post the results from the lower window 'Virus Log Information'.
Also post a new Hijackthis log,let me know how its going now.
Posted Image
Posted Image

#12 RichieUK

RichieUK

    Malware Assassin


  • Malware Response Team
  • 13,614 posts
  • OFFLINE
  •  
  • Local time:05:51 PM

Posted 01 March 2007 - 07:09 AM

This topic has been re-opened at the request of rainbow warrior.

Edited by RichieUK, 04 March 2007 - 05:37 PM.

Posted Image
Posted Image

#13 rainbow_warrior

rainbow_warrior
  • Topic Starter

  • Members
  • 90 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Newark, Delaware
  • Local time:11:51 AM

Posted 05 March 2007 - 01:19 AM

Hi

I did the mwav scan and saved two logs. One is where it says, "show log," and, "save log." The other is from my cutting and pasting the box that says virus results. I think it said it removed 66 items before I rebooted, and then it did another scan before windows started.

When I started the computer today, I was surprised that the teatimer icon from spybot did not appear next to the ones for avg and zone alarm in the lower right. Then I discovered that spybot had disappeared from the start menu and the add/remove programs list. I downloaded and reinstalled spybot, updated it and ran a scan. The spybot scan took longer than normal, I think, about 34 minutes. The icon did not actually reappear until I finished the mwav scan, even though I activated the teatimer from the beginning. (I had to click on accept a bunch of times to allow registry items to be changed, presumably by mwav.)

I did realize that those registry entries starting with CAFFEE are from java.

Thanks for having another look. My sister thinks she has an incurable virtumundo infection after talking to symantec and dell. I told her virtumonde might be a symptom of fixware or something, and showed her this forum. Can these problems be transmitted by email without opening attachments?

Below are the logs copied from a USB drive. I am at my own house now, not where this computer is.

rainbow_warrior

ps. The other mwav log is about three times the allowed post length; so I deleted it. Do you need to see it?


********

Object "2antispyware Corrupted Adware/Spyware" found in File System! Action Taken: Entries Removed.
Object "smitfraud Browser Hijacker" found in File System! Action Taken: Entries Removed.
Object "2antispyware Corrupted Adware/Spyware" found in File System! Action Taken: Entries Removed.
Entry "HKCR\Alg.AlgSetup" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: Entries Removed.
Entry "HKCR\AOL.IEToolbar" refers to invalid object "{4982D40A-C53B-4615-B15B-B5B5E98D167C}". Action Taken: Entries Removed.
Entry "HKCR\AOL.PicMgrCtrl" refers to invalid object "{B33CCD56-0909-42C9-8A88-8976F66B8BF2}". Action Taken: Entries Removed.
Entry "HKCR\Automap.Map.NA" refers to invalid object "{A49EEA00-9231-4C77-AA9E-2F89D72B4804}". Action Taken: Entries Removed.
Entry "HKCR\Automap.Map.NA.8" refers to invalid object "{A49EEA00-9231-4C77-AA9E-2F89D72B4804}". Action Taken: Entries Removed.
Entry "HKCR\Automap.Template.NA.8" refers to invalid object "{A49EEA00-9231-4C77-AA9E-2F89D72B4804}". Action Taken: Entries Removed.
Entry "HKCR\DirectAnimation.PathControl" refers to invalid object "{D7A7D7C3-D47F-11D0-89D3-00A0C90833E6}". Action Taken: Entries Removed.
Entry "HKCR\DirectAnimation.Sequence" refers to invalid object "{4F241DB1-EE9F-11D0-9824-006097C99E51}". Action Taken: Entries Removed.
Entry "HKCR\DirectAnimation.SequencerControl" refers to invalid object "{B0A6BAE2-AAF0-11D0-A152-00A0C908DB96}". Action Taken: Entries Removed.
Entry "HKCR\DirectAnimation.SpriteControl" refers to invalid object "{FD179533-D86E-11D0-89D6-00A0C90833E6}". Action Taken: Entries Removed.
Entry "HKCR\DirectAnimation.StructuredGraphicsControl" refers to invalid object "{369303C2-D7AC-11D0-89D5-00A0C90833E6}". Action Taken: Entries Removed.
Entry "HKCR\JavaPlugin.160" refers to invalid object "{5852F5ED-8BF4-11D4-A245-0080C6F74284}". Action Taken: Entries Removed.
Entry "HKCR\Plenoptic.Plenoptic" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: Entries Removed.
Entry "HKCR\RTCCore.RTCClient" refers to invalid object "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Action Taken: Entries Removed.
Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: Entries Removed.
Entry "HKCR\WMPShell.HWEventHandler" refers to invalid object "{9B186A8F-F520-4eeb-B553-118304AC46C5}". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\CHANDLER\System32\DDMI.VXD". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\CHANDLER\System32\DDMI2.sys". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\CHANDLER\System32\DLPT.sys". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\CHANDLER\System32\DLPT.VXD". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\CHANDLER\System32\DProg.ini". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\CHANDLER\System32\DView.cfg". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\CHANDLER\System32\qdiagcc.ocx". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Documents and Settings\All Users.CHANDLER\Application Data\Microsoft\Works\mswkscal.wcd". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\CHANDLER\system32\DDMI2.sys". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\CHANDLER\system32\DLPT.sys". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Real\GToolbar\BarControl.dll". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\CHANDLER\System32\DView.cfg". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\CHANDLER\System32\DProg.ini". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\CHANDLER\System32\qdiagcc.ocx". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\CHANDLER\System32\msxml3a.dll". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\CHANDLER\Temp\DellBckp\". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "America Online us". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "AOL Connectivity Services". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "AOL Spyware Protection". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "AOLCC". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB821557". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB823559". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB828741". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB833987". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB834707-IE6-20040929.115007". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB835732". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB840987". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB841356". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB841533". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB842773". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB873376". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "KB887822". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (1.0.5)". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (1.5)". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (1.5.0.8)". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Mozilla Firefox (1.5.0.9)". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Q329048". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Q329115". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Q329170". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Q329390". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Q329441". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Q329834". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Q810577". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Q810833". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Q815021". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "Q817606". Action Taken: Entries Removed.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" refers to invalid object "{3248F0A8-6813-11D6-A77B-00B0D0160000}". Action Taken: Entries Removed.

*************

Logfile of HijackThis v1.99.1
Scan saved at 5:12:46 PM, on 3/4/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\CHANDLER\System32\smss.exe
C:\CHANDLER\system32\winlogon.exe
C:\CHANDLER\system32\services.exe
C:\CHANDLER\system32\lsass.exe
C:\CHANDLER\system32\svchost.exe
C:\CHANDLER\System32\svchost.exe
C:\CHANDLER\system32\ZoneLabs\vsmon.exe
C:\CHANDLER\system32\devldr32.exe
C:\CHANDLER\Explorer.EXE
C:\CHANDLER\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\CHANDLER\System32\CTsvcCDA.EXE
C:\CHANDLER\System32\HPZipm12.exe
C:\CHANDLER\System32\svchost.exe
C:\CHANDLER\wanmpsvc.exe
C:\CHANDLER\System32\MsPMSPSv.exe
C:\Program Files\Common Files\AOL\1105218204\ee\AOLSoftware.exe
C:\CHANDLER\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Program Files\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1105218204\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\CHANDLER\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk.disabled
O4 - Global Startup: HP Digital Imaging Monitor.lnk.disabled
O4 - Global Startup: Microsoft Office.lnk.disabled
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk.disabled
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - https://objects.aol.com/mcafee/molbin/share...83/mcinsctl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O20 - Winlogon Notify: WgaLogon - C:\CHANDLER\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\CHANDLER\System32\CTsvcCDA.EXE
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\CHANDLER\System32\HPZipm12.exe
O23 - Service: Sunbelt CounterSpy Antispyware (SBCSSvc) - Sunbelt Software - C:\Program Files\Sunbelt Software\CounterSpy\SBCSSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\CHANDLER\system32\ZoneLabs\vsmon.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\CHANDLER\wanmpsvc.exe

#14 RichieUK

RichieUK

    Malware Assassin


  • Malware Response Team
  • 13,614 posts
  • OFFLINE
  •  
  • Local time:05:51 PM

Posted 05 March 2007 - 02:54 AM

Please run the F-Secure online virus/spyware scan using Internet Explorer:
http://support.f-secure.com/enu/home/ols3.shtml
Follow the directions in the F-Secure page for proper Installation.
Accept the License Agreement.
Once the ActiveX installs,Click ‘Custom Scan’ and be sure the following are checked:
1.Scan whole System
2.Scan all files
3.Scan whole system for rootkits
4.Scan whole system for spyware
5.Scan inside archives
6.Use advanced heuristics
Once the download completes,the scan will begin automatically.
The scan will take some time to finish,so please be patient.
When the scan completes, click the ‘I want to decide item by item’ button.
For each item found,Select ‘Disinfect’ and click ‘Next’.
Click the ‘Show Report’ button,then copy and paste the entire report into your next reply.

******************************

Go to:
C:\Program Files\hijack this\HijackThis.exe
Right click on Hijackthis.exe and select 'Rename', rename it to abc.bat
Double click on abc.bat(which is still Hijackthis.exe),post that log into your next reply,also post the F-Secure report please.
Posted Image
Posted Image

#15 rainbow_warrior

rainbow_warrior
  • Topic Starter

  • Members
  • 90 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Newark, Delaware
  • Local time:11:51 AM

Posted 05 March 2007 - 01:56 PM

Hi RichieUK

The F-Secure custom scan is now running. Overall CPU usage seems to be staying below 20%, with explorer.exe the biggest user.

There seems to be a significant change. When I arrived today, the computer was on, but the screen was blank from inactivity. After touching a key, the display powered up more or less as usual, and changed to a blue screen with the choice of two users. Usually when I select the active user, it has been taking maybe 90 seconds for the desktop to appear. This time, the desktop appeared immediately.

rainbow_warrior




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users