Computing.Net > Forums > Security and Virus > I have a virus PSW.x-Virtrojan

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

I have a virus PSW.x-Virtrojan

Reply to Message Icon

Name: joshywow
Date: February 10, 2007 at 12:37:33 Pacific
OS: Windows XP
CPU/Ram: ?
Product: ?
Comment:

I did a hijack log and if u can please tell me what to do from here it says i have that PSW.x-Virtrojan. please help my email is joshywow@yahoo.com



Sponsored Link
Ads by Google

Response Number 1
Name: jabuck
Date: February 10, 2007 at 13:04:18 Pacific
Reply:

Post your Hijack This log please.

Then download SmitFraudFix from this link http://siri.urz.free.fr/Fix/Smitfra... Then extract the contents to your desktop.
!!!! Only run option #1 as runing the other options on an uninfected computer will damage the desktop.!!!!
Open the "SmitfraudFix" folder and double-click "smitfraudfix.cmd"
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.


0

Response Number 2
Name: joshywow
Date: February 10, 2007 at 13:21:57 Pacific
Reply:

Logfile of HijackThis v1.99.1
Scan saved at 3:21:30 PM, on 2/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mclogsrv.exe
C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\PROGRA~1\McAfee\MSC\mctskshd.exe
C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\ehome\RMSvc.exe
C:\Program Files\SiteAdvisor\6021\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\dllhost.exe
C:\PROGRA~1\McAfee\MSC\mcregist.exe
C:\Program Files\Video ActiveX Object\pmsnrr.exe
C:\Program Files\Video ActiveX Object\isamntr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\AOL\1170993099\ee\AOLSoftware.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Video ActiveX Object\pmmnt.exe
C:\Program Files\Video ActiveX Object\isamini.exe
C:\Program Files\Java\jre1.5.0_10\bin\javaw.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\SiteAdvisor\6021\SiteAdv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01?FOR...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.com/0SEENUS/SAOS01?FOR...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?Lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?Lin...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?Lin...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?Lin...
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FOR...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {67982BB7-0F95-44C5-92DC-E3AF3DC19D6D} - C:\Program Files\Video ActiveX Object\isadd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: (no name) - {9FB3908C-6565-4CB0-95F8-E9F85258723C} - (no file)
O3 - Toolbar: Protection Bar - {84938242-5C5B-4A55-B6B9-A1507543B418} - C:\Program Files\Video ActiveX Object\iesplugin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1170993099\ee\AOLSoftware.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - Startup: MP3 Rocket (silent).lnk = C:\Program Files\MP3 Rocket\MP3Rocket_on_startup.exe
O4 - Global Startup: Extender Resource Monitor.lnk = C:\WINDOWS\ehome\RMSysTry.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolba...
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd....
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v1...
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - http://cdn.downloadcontrol.com/file...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?lin...
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/no...
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v1...
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/Walgreen...
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v1...
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.cherrytap.com/imgs/Image...
O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} (UnoCtrl Class) - http://zone.msn.com/bingame/zpagame...
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagame...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramewo...
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v1...
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/h...
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://www.driveragent.com/files/dr...
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: exemplars - {2acf3add-34a1-4f2f-99cf-cc69785d1e90} - (no file)
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mclogsrv.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Task Scheduler (mctskshd.exe) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mctskshd.exe
O23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6021\SAService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe



0

Response Number 3
Name: joshywow
Date: February 10, 2007 at 13:32:50 Pacific
Reply:

I DID THIS TOOO

SmitFraudFix v2.141

Scan done at 15:26:16.85, Sat 02/10/2007
Run from C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Desktop\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu

C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url FOUND !
C:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\KINGJU~1.000\FAVORI~1

C:\DOCUME~1\KINGJU~1.000\FAVORI~1\Online Security Test.url FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» Desktop

C:\DOCUME~1\ALLUSE~1\Desktop\Online Security Guide.url FOUND !
C:\DOCUME~1\ALLUSE~1\Desktop\Security Troubleshooting.url FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

C:\Program Files\Video ActiveX Object\ FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{2acf3add-34a1-4f2f-99cf-cc69785d1e90}"="exemplars"

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32


»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

Josh Peaine


0

Response Number 4
Name: jabuck
Date: February 10, 2007 at 13:35:15 Pacific
Reply:

Next, please reboot your computer in Safe Mode by doing the following :

Restart your computer

After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;

Instead of Windows loading as normal, a menu with options should appear;

Select the first option, to run Windows in Safe Mode, then press "Enter".

Choose your usual account.

Once in Safe Mode, open the "SmitfraudFix" folder again and double-click "smitfraudfix.cmd"
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing " Y " and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if "wininet.dll " is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing "Y" and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.

A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt

Also post back with a new Hijack This log.


0

Response Number 5
Name: joshywow
Date: February 10, 2007 at 13:58:09 Pacific
Reply:

SmitFraudFix v2.141

Scan done at 15:48:22.18, Sat 02/10/2007
Run from C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Desktop\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{2acf3add-34a1-4f2f-99cf-cc69785d1e90}"="exemplars"


»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url Deleted
C:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url Deleted
C:\DOCUME~1\ALLUSE~1\Desktop\Online Security Guide.url Deleted
C:\DOCUME~1\ALLUSE~1\Desktop\Security Troubleshooting.url Deleted
C:\DOCUME~1\KINGJU~1.000\FAVORI~1\Online Security Test.url Deleted
C:\Program Files\Video ActiveX Object\ Deleted

»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End

Josh Peaine


0

Related Posts

See More



Response Number 6
Name: joshywow
Date: February 10, 2007 at 13:58:44 Pacific
Reply:

Logfile of HijackThis v1.99.1
Scan saved at 3:58:26 PM, on 2/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mclogsrv.exe
C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\PROGRA~1\McAfee\MSC\mctskshd.exe
C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\ehome\RMSvc.exe
C:\Program Files\SiteAdvisor\6021\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\dllhost.exe
C:\PROGRA~1\McAfee\MSC\mcregist.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\AOL\1170993099\ee\AOLSoftware.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre1.5.0_10\bin\javaw.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hijackthis\HijackThis.exe

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: (no name) - {9FB3908C-6565-4CB0-95F8-E9F85258723C} - (no file)
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1170993099\ee\AOLSoftware.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - Startup: MP3 Rocket (silent).lnk = C:\Program Files\MP3 Rocket\MP3Rocket_on_startup.exe
O4 - Global Startup: Extender Resource Monitor.lnk = C:\WINDOWS\ehome\RMSysTry.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolba...
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd....
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\pc tools\lsp\pctlsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v1...
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - http://cdn.downloadcontrol.com/file...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?lin...
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/no...
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v1...
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/Walgreen...
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v1...
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.cherrytap.com/imgs/Image...
O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} (UnoCtrl Class) - http://zone.msn.com/bingame/zpagame...
O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (ZPA_TexasHoldem Object) - http://zone.msn.com/bingame/zpagame...
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramewo...
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v1...
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/h...
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6021\SiteAdv.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Log Manager (McLogManagerService) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mclogsrv.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Task Scheduler (mctskshd.exe) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mctskshd.exe
O23 - Service: McAfee User Manager (mcusrmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6021\SAService.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

Josh Peaine


0

Response Number 7
Name: jabuck
Date: February 10, 2007 at 14:17:43 Pacific
Reply:

Now for some clean up.

Please download ATF-Cleaner to your desktop from this link
http://www.atribune.org/content/view/19/2/ We will need it later in safe mode

Download and install AVG Anti-Spyware We will need this later in safe mode

Be sure to update AVG Anti- Spyware

Empty the restore folder. Go to start>control panel>system>system restore tab>check the box beside "turn off system restore>apply (takes a minute)>ok. Go back and uncheck the box to turn system restore back on>apply>ok.

Run Hijack This from safe mode, close all windows and browsers except Hijack This, place a check to the left of the following items and press "fix checked":

R3 - URLSearchHook: (no name) - - (no file)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O3 - Toolbar: (no name) - {9FB3908C-6565-4CB0-95F8-E9F85258723C} - (no file)

Exit Hijack This.

Next, please reboot your computer in Safe Mode by doing the following :

Restart your computer

After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;

Instead of Windows loading as normal, a menu with options should appear;

Select the first option, to run Windows in Safe Mode, then press "Enter".

Choose your usual account.

Run ATF-Cleaner from safe mode.Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

In Safe Mode, run AVG Anti-spyware and click on the Scanner tab at the top. Click the "Settings" tab and then change the recommended action to Quarantine and click Automatically generate report after every scan. Click back to the "Scan" tab and then click on Complete System Scan. This scan can take quite a while to run, so be prepared.

AVG Anti-Spyware will list any infections found on the left hand side. When the scan has finished, it will automatically set the recommended action. Click the Apply all actions button. AVG Anti-Spyware will display "All actions have been applied" on the right hand side.

Click on "Save Report", then "Save Report As". This will create a text file. Make sure you know where to find this file again (like on the Desktop).

Post the Avg AntiSpyware report.

Your java is out of date and probably how you got infected. Download the latest version of http://java.sun.com/javase/downloads/index.jsp

Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".

Click the "Download" button to the right.

Check the box that says: "Accept License Agreement". The page will refresh.

Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.

Close any programs you may have running - especially your web browser.

Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java. Check any item with Java Runtime Environment (JRE or J2SE) in the name. It should have the "coffee cup" icon next to it.

Click the Remove or Change/Remove button. Repeat as many times as necessary to remove each Java versions.

Reboot your computer once all Java components are removed

. Then from your desktop double-click on jre-1_6_0-windowsi586-p.exe to install the newest version.


0

Response Number 8
Name: joshywow
Date: February 10, 2007 at 15:37:43 Pacific
Reply:


AVG Anti-Spyware - Scan Report


+ Created at: 5:21:43 PM 2/10/2007

+ Scan result:

HKU\S-1-5-21-4170928061-2780536007-2595723014-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{56F1D444-11BF-4879-A12B-79CF0177F038} -> Adware.180Solutions : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager -> Adware.HotBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager.1 -> Adware.HotBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CLSID -> Adware.HotBar : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CurVer -> Adware.HotBar : Cleaned with backup (quarantined).
C:\Program Files\MP3 Rocket\MP3Rocket.exe -> Adware.MediaTicket : Cleaned with backup (quarantined).
C:\Program Files\MP3 Rocket\MP3Rocket_on_startup.exe -> Adware.MediaTicket : Cleaned with backup (quarantined).
:mozilla.530:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.531:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.213:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.214:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.215:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.216:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.217:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.218:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.219:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.220:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.221:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.222:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.223:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.224:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.225:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.226:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.227:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.228:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.229:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.230:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.319:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.372:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.444:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.18:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.19:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.20:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.21:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.22:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.131:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.132:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.133:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.134:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.135:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.136:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.114:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.115:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.116:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.117:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.118:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.31:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.395:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.259:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.260:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.261:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.426:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.121:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.122:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.123:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.124:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.125:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.126:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.127:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.128:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.129:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.130:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.351:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.354:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.355:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.356:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.361:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.370:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.544:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.23:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.406:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.407:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.408:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.409:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.138:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.139:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.140:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.141:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.142:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.143:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.144:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.145:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.146:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.147:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.461:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.462:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.463:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.464:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.465:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.500:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.534:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.535:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.539:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.554:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.556:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.16:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.17:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.110:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.262:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.263:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.264:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.265:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.498:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.499:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.379:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.380:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.381:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.342:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.343:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.344:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.345:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.346:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.347:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.518:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.266:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.267:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.268:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.427:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.491:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.529:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.163:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.164:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.165:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.166:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.167:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.168:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.169:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.170:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.14:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.504:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.505:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.506:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.507:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.508:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.509:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.155:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.156:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.157:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.158:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.159:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.160:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.161:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.162:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.70:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.71:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.72:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.73:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.74:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.75:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.76:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.77:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.78:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.79:C:\Documents and Settings\KiNg JuGgAlO.YOUR-1EDA2AF6BC.000\Application Data\Mozilla\Firefox\Profiles\42dpjy83.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.


::Report end

Josh Peaine


0

Response Number 9
Name: jabuck
Date: February 10, 2007 at 15:53:20 Pacific
Reply:

Go to start> control panel> add/remove programs and uninstall these programs if found:

180 Search Assistant

180Solutions

180ClientStubInstall

nCase

Hotbar

How is your computer running?



0

Response Number 10
Name: joshywow
Date: February 10, 2007 at 15:57:03 Pacific
Reply:

The computers running perfect now and i dont get anymore warnings that i have a virus. So im pretty sure its gone. Thank you for all your help!

Josh Peaine


0

Response Number 11
Name: jabuck
Date: February 10, 2007 at 16:05:09 Pacific
Reply:

Glad we could help.


0

Response Number 12
Name: joshywow
Date: February 10, 2007 at 16:06:47 Pacific
Reply:

Yes ill keep in touch if you want i have yahoo msn and aim joshywow@yahoo.com is my main email

Josh Peaine


0

Response Number 13
Name: fugitive
Date: April 24, 2007 at 12:47:36 Pacific
Reply:

I was told not to post a log untill asked, and I did but no reply. Can someone with expert statis on this Trojan-dll problem help?
TIA Greg


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: I have a virus PSW.x-Virtrojan

I have a virous PSW.x-Virtrojan www.computing.net/answers/security/i-have-a-virous-pswxvirtrojan/21193.html

I have a virous PSW.x-Virtrojan www.computing.net/answers/security/i-have-a-virous-pswxvirtrojan/20222.html

help pls. i think i have a virus www.computing.net/answers/security/help-pls-i-think-i-have-a-virus/4704.html