Computing.Net > Forums > Security and Virus > Klone Virus =*(

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Klone Virus =*(

Reply to Message Icon

Original Message
Name: redslippahs
Date: October 16, 2006 at 14:00:44 Pacific
Subject: Klone Virus =*(
OS: Windows XP Media Center 2
CPU/Ram: 3.19GHz/1GB
Manufacturer/Model: Intel
Comment:

I'm having trouble getting rid of the Klone virus too! I've read through some of the other posts and have downloaded the following:

Hijack This v1.99.1
SmitRemFix
ATF-Cleaner
Ewido Security Suite
VundoFix
ComboFix
Killbox

I'm not very good at this but definitely willing to give it a shot to get rid of the popups! Thanks again!



Report Offensive Message For Removal


Response Number 1
Name: XpUser4Real
Date: October 16, 2006 at 15:13:33 Pacific
Reply:

Try a free Active X On-line Spyware Scan
and remove all it finds

Then clean your PC using:
ATF-Cleaner
Crap Cleaner
(those will get rid of all the infected cookies and files and also speed up the next scans

Then run an online scan at:
Housecall
Bit Defender
Kaspersky.
Those scanners allow you to remove infections without buying the product. Post back if you have any problems after that.

Hopefully my advice will help you...Please post back with your results....thanks


Report Offensive Follow Up For Removal

Response Number 2
Name: redslippahs
Date: October 16, 2006 at 21:42:55 Pacific
Reply:

I ran the ActiveX Online Scan, then ATF/Crap Cleaner and finally Bit Defender and Kapersky. Haven't got the Winantivirus popup in a while but I'll keep you posted if anything else comes up. Thanks for the help!


Report Offensive Follow Up For Removal

Response Number 3
Name: XpUser4Real
Date: October 17, 2006 at 00:00:52 Pacific
Reply:

You are welcome, hope all stays well on your PC.

Hopefully my advice will help you...Please post back with your results....thanks


Report Offensive Follow Up For Removal

Response Number 4
Name: XpUser4Real
Date: October 17, 2006 at 03:53:32 Pacific
Reply:

also, D/L Spyware Blaster and make sure to update it every week.

Hopefully my advice will help you...Please post back with your results....thanks


Report Offensive Follow Up For Removal

Response Number 5
Name: redslippahs
Date: October 17, 2006 at 17:33:57 Pacific
Reply:

Sad to report that the WinAntivirus popup came back this morning. I'm starting to think that I'll have to remove the Klone virus the long way, using the HJT, ATF, Ewido, etc... Any suggestions?


Report Offensive Follow Up For Removal


Response Number 6
Name: XpUser4Real
Date: October 17, 2006 at 18:20:55 Pacific
Reply:

yes, send an IM to Jabuck, he is the best we have here. Make sure to give him the Post number and also the heading of your post. Good Luck

Hopefully my advice will help you...Please post back with your results....thanks


Report Offensive Follow Up For Removal

Response Number 7
Name: jabuck
Date: October 22, 2006 at 17:24:53 Pacific
Reply:

Rename hijackthis.exe as that sometimes helps locate the baddies. Go to start> search> files and folders> type in the top space "hijackthis.exe" without the quotes> click search> when it is found in the right pane (looks like a pile of dynamite)>right click on it> click rename> rename it "show.exe" without the quotes> click a blank space on the screen. Then post a Hijack This log please.

Please download SmitRemFix from this link http://siri.urz.free.fr/Fix/SmitfraudFix.zip Then extract the contents to your desktop.

!!!! Only run option #1 as runing the other options on an uninfected computer will damage the desktop.!!!!

Open the "SmitfraudFix" folder and double-click "smitfraudfix.cmd"
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.


Report Offensive Follow Up For Removal

Response Number 8
Name: redslippahs
Date: October 24, 2006 at 02:12:42 Pacific
Reply:

The HijackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 11:07 PM, on 10-23-06
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
C:\Program Files\Sony\Sony TV Tuner Library\SMceMan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Linksys Wireless AG USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless AG USB Wireless Network Monitor\WUSB54AG.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\Program Files\SONY\sHotKey\sHotKey.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Linksys Wireless AG USB Wireless Network Monitor\InfoMyCa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\FinePixViewer\QuickDCF2.exe
C:\Program Files\Sweetopia_at\Sweetopia.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\show.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.sony.com/vaiopeople
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Melissa\Application Data\Mozilla\Profiles\default\0v7y0vbq.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: RawExecAction Object - {18898424-E3AB-4BA9-8E8D-5434B1CECA75} - C:\WINDOWS\System32\pmnli.dll (file missing)
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {849B9523-785F-4014-9CAF-079FB4A74C61} - C:\WINDOWS\system32\ijvuadri.dll (file missing)
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: (no name) - {B05FA6EF-CCAF-481F-80E1-A21562BC7B65} - C:\WINDOWS\ekymws.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)
O3 - Toolbar: &VSToolBar - {821F87FF-8245-4972-9E28-732E92EC2F51} - C:\Program Files\VSToolbar\VSToolBar.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [sHotKey] "C:\Program Files\SONY\sHotKey\sHotKey.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [MyCA] C:\Program Files\Linksys Wireless AG USB Wireless Network Monitor\InvokeSvc3.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MagicMatchSetup.exe] C:\DOCUME~1\Melissa\Desktop\MAGICM~1.EXE /r
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - Global Startup: Exif Launcher 2.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O15 - Trusted Zone: http://www.amaena.com
O15 - Trusted Zone: http://locator.cdn.imageservr.com
O15 - Trusted Zone: http://www.oceanic.com
O15 - Trusted Zone: http://scanner.sysprotect.com
O15 - Trusted Zone: http://*.systemdoctor.com
O15 - Trusted Zone: http://www.winantivirus.com
O15 - Trusted Zone: http://www.winantiviruspro.com
O15 - Trusted Zone: http://download.cdn.winsoftware.com
O15 - Trusted IP range: http://202.67.220.225
O15 - Trusted IP range: http://59.148.220.121
O15 - Trusted IP range: http://62.4.84.53
O15 - Trusted IP range: http://82.98.235.58
O15 - Trusted IP range: http://85.12.25.90
O16 - DPF: RaptisoftGameLoader - http://real.gamehouse.com/games/rap...
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/pa...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?Lin...
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/h...
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/res...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microso...
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yah...
O20 - Winlogon Notify: ekymws - C:\WINDOWS\ekymws.dll
O20 - Winlogon Notify: pmnli - C:\WINDOWS\System32\pmnli.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\PACSPT~1.EXE
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SonicStageMonitoring - Sony Corporation - C:\Program Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\halsv.exe
O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe
O23 - Service: Sony TVTA Manager - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\SMceMan.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
O23 - Service: VAIO Entertainment File Import Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VCSW\VCSW.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\IntegratedServer\HTTP (file missing)
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway Server (file missing)
O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Video\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing)
O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing)
O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\UPnPFramework.exe
O23 - Service: WUSB54AG - Unknown owner - C:\Program Files\Linksys Wireless AG USB Wireless Network Monitor\WLService.exe" "WUSB54AG.exe (file missing)

Here's the SmitfraudFix Report as requested


SmitFraudFix v2.110

Scan done at 23:10:03.48, 10-23-06
Run from C:\Documents and Settings\Melissa\Desktop\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Melissa


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Melissa\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Melissa\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32


»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End



Report Offensive Follow Up For Removal

Response Number 9
Name: jabuck
Date: October 24, 2006 at 14:58:48 Pacific
Reply:

It appears that you have two antiviruses running. You should decide which one you want to keep and uninstall the other one as they will conflict and cause you problems.

Go to start> control panel> add/remove programs> scroll down to and uninstall these programs if found:

Winantivirus

Winantiviruspro

Winantiviruspro2006

Please download “Avenger” by swandog46 to your desktop from this link http://swandog46.geekstogo.com/avenger.zip

1. Click on Avenger.zip to open the file
Extract avenger.exe to your desktop

2. Copy all the text contained in the area between the X"s below to your Clipboard by highlighting it and pressing (Ctrl+C):
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Files to delete:
C:\WINDOWS\ekymws.dll

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.
3. Now, start The Avenger program by clicking on its icon on your desktop.
Under "Script file to execute" choose "Input Script Manually".
Now click on the Magnifying Glass icon which will open a new window titled "View/edit script"
Paste the text copied to clipboard into this window by pressing (Ctrl+V).
Click Done
Now click on the Green Light to begin execution of the script
Answer "Yes" twice when prompted.
4. The Avenger will automatically do the following:
It will Restart your computer. ( In cases where the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
On reboot, it will briefly open a black command window on your desktop, this is normal.
After the restart, it creates a log file that should open with the results of Avenger's actions. This log file will be located at C:\avenger.txt
The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
5. Please copy/paste the content of c:\avenger.txt into your reply.

Download “Winhelp2002's “ domain cleaner from this link DelDomains.inf

Next, right click the desktop icon (deldomains.inf) and select Install from the menu.

Please download ComboFix to the Desktop from this link:

http://download.bleepingcomputer.com/sUBs/combofix.exe

Double-click combofix.exe
Follow the prompts.
(Don't click on the window while the program is running, it may cause your system to hang.)

Please post the combofix.txt log.

Download the following tools after you post Avenger,Combofix and new Hijack This log.

Please download ATF-Cleaner to your desktop from this link
http://www.atribune.org/content/view/19/2/ We will need it later in safe mode

Download and install AVG Anti-Spyware We will need this later in safe mode

Be sure to update AVG Anti- Spyware

Download Killbox to your desktop from this link Killbox by Option^Explicit. If you already have "Killbox" update to this newer version. We will need it later in safe mode


Report Offensive Follow Up For Removal

Response Number 10
Name: jabuck
Date: October 24, 2006 at 15:58:03 Pacific
Reply:

It appears that you have two antiviruses running. You should decide which one you want to keep and uninstall the other one as they will conflict and cause you problems.

Go to start> control panel> add/remove programs> scroll down to and uninstall these programs if found:

Winantivirus

Winantiviruspro

Winantiviruspro2006

Please download “Avenger” by swandog46 to your desktop from this link http://swandog46.geekstogo.com/avenger.zip

1. Click on Avenger.zip to open the file
Extract avenger.exe to your desktop

2. Copy all the text contained in the area between the X"s below to your Clipboard by highlighting it and pressing (Ctrl+C):
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Files to delete:
C:\WINDOWS\ekymws.dll

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.
3. Now, start The Avenger program by clicking on its icon on your desktop.
Under "Script file to execute" choose "Input Script Manually".
Now click on the Magnifying Glass icon which will open a new window titled "View/edit script"
Paste the text copied to clipboard into this window by pressing (Ctrl+V).
Click Done
Now click on the Green Light to begin execution of the script
Answer "Yes" twice when prompted.
4. The Avenger will automatically do the following:
It will Restart your computer. ( In cases where the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
On reboot, it will briefly open a black command window on your desktop, this is normal.
After the restart, it creates a log file that should open with the results of Avenger's actions. This log file will be located at C:\avenger.txt
The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
5. Please copy/paste the content of c:\avenger.txt into your reply.

Download “Winhelp2002's “ domain cleaner from this link DelDomains.inf

Next, right click the desktop icon (deldomains.inf) and select Install from the menu.

Please download ComboFix to the Desktop from this link:

http://download.bleepingcomputer.com/sUBs/combofix.exe

Double-click combofix.exe
Follow the prompts.
(Don't click on the window while the program is running, it may cause your system to hang.)

Please post the combofix.txt log.

Download the following tools after you post Avenger,Combofix and new Hijack This log.

Please download ATF-Cleaner to your desktop from this link
http://www.atribune.org/content/view/19/2/ We will need it later in safe mode

Download and install AVG Anti-Spyware We will need this later in safe mode

Be sure to update AVG Anti- Spyware

Download Killbox to your desktop from this link Killbox by Option^Explicit. If you already have "Killbox" update to this newer version. We will need it later in safe mode


Report Offensive Follow Up For Removal

Response Number 11
Name: redslippahs
Date: October 24, 2006 at 23:56:42 Pacific
Reply:

Couldn't find any of the winantivirus programs in the add/remove section.

Avenger Log


Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\lqhovhph

*******************

Script file located at: \??\C:\Documents and Settings\vdecakif.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File C:\WINDOWS\ekymws.dll deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

Combofix Log


Melissa - 10-24-06 20:12:18.31 Service Pack 2
ComboFix 06.10.16 - Running from: "C:\Documents and Settings\Melissa\Desktop"

((((((((((((((((((((((((((((((( Files Created from 2010-15-06 to 2010-16-06 ))))))))))))))))))))))))))))))))))


2010-16-06 10:32 AM C:\WINDOWS\system32\drivers3,968 AvgAsCln.sys


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2012-18-04 06:32 PM 38229 --------- C:\WINDOWS\system32\drivers\StMp3Rec.sys
2012-16-03 02:55 AM 82136 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2012-05-00 02:18 PM 3952 -ra------ C:\WINDOWS\system32\drivers\DMICall.sys
2011-25-01 01:11 AM 81924 --------- C:\WINDOWS\system32\drivers\VC4CB104.SYS
2010-15-04 04:24 PM 46208 --a------ C:\WINDOWS\system32\drivers\symndis.sys
2010-15-04 04:24 PM 34496 --a------ C:\WINDOWS\system32\drivers\symids.sys
2010-15-04 04:24 PM 266432 --a------ C:\WINDOWS\system32\drivers\symtdi.sys
2010-15-04 04:24 PM 25824 --a------ C:\WINDOWS\system32\drivers\symredrv.sys
2010-15-04 04:24 PM 171424 --a------ C:\WINDOWS\system32\drivers\symfw.sys
2010-15-04 04:24 PM 11040 --a------ C:\WINDOWS\system32\drivers\symdns.sys


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"MagicMatchSetup.exe"="C:\\DOCUME~1\\Melissa\\Desktop\\MAGICM~1.EXE /r"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\1.2.908.5008\\GoogleToolbarNotifier.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"ezShieldProtector for Px"="C:\\WINDOWS\\System32\\ezSP_Px.exe"
"WildTangent CDA"="\"C:\\Program Files\\WildTangent\\Apps\\CDA\\GameDrvr.exe\" /startup \"C:\\Program Files\\WildTangent\\Apps\\CDA\\cdaEngine0500.dll\""
"VAIO Update 2"="\"C:\\Program Files\\Sony\\VAIO Update 2\\VAIOUpdt.exe\" /Stationary"
"VAIO Recovery"="C:\\WINDOWS\\Sonysys\\VAIO Recovery\\PartSeal.exe"
"URLLSTCK.exe"="C:\\Program Files\\Norton Internet Security\\UrlLstCk.exe"
"Symantec NetDriver Monitor"="C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe"
"sHotKey"="\"C:\\Program Files\\SONY\\sHotKey\\sHotKey.exe\""
"ehTray"="C:\\WINDOWS\\ehome\\ehtray.exe"
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"AGRSMMSG"="AGRSMMSG.exe"
"AcctMgr"="C:\\Program Files\\Norton SystemWorks\\Password Manager\\AcctMgr.exe /startup"
"REGSHAVE"="C:\\Program Files\\REGSHAVE\\REGSHAVE.EXE /AUTORUN"
"MyCA"="C:\\Program Files\\Linksys Wireless AG USB Wireless Network Monitor\\InvokeSvc3.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide"
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP"
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,00,01,00,00,00,00,00,00,00,04,00,00,e2,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,12,03,00,00,23,00,00,00,dc,00,00,00,d2,00,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw.exe /RUNONCE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook"
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ekymws
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\pmnli

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\Symantec NetDetect.job

Completion time: 10-24-06 20:13:50.21
C:\ComboFix.txt ... 10-24-06 08:13 PM


HijackThis Log


Logfile of HijackThis v1.99.1
Scan saved at 8:53:08 PM, on 10/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
C:\Program Files\Sony\Sony TV Tuner Library\SMceMan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
C:\Program Files\Linksys Wireless AG USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless AG USB Wireless Network Monitor\WUSB54AG.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\Program Files\SONY\sHotKey\sHotKey.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Linksys Wireless AG USB Wireless Network Monitor\InfoMyCa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\FinePixViewer\QuickDCF2.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Hijackthis\show.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.sony.com/vaiopeople
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Melissa\Application Data\Mozilla\Profiles\default\0v7y0vbq.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: RawExecAction Object - {18898424-E3AB-4BA9-8E8D-5434B1CECA75} - C:\WINDOWS\System32\pmnli.dll (file missing)
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {849B9523-785F-4014-9CAF-079FB4A74C61} - C:\WINDOWS\system32\ijvuadri.dll (file missing)
O2 - BHO: (no name) - {86B0D5DC-02ED-4F9D-B70A-F9102278A8C7} - C:\WINDOWS\ekymws.dll (file missing)
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)
O3 - Toolbar: &VSToolBar - {821F87FF-8245-4972-9E28-732E92EC2F51} - C:\Program Files\VSToolbar\VSToolBar.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [WildTangent CDA] "C:\Program Files\WildTangent\Apps\CDA\GameDrvr.exe" /startup "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0500.dll"
O4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [sHotKey] "C:\Program Files\SONY\sHotKey\sHotKey.exe"
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton SystemWorks\Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [MyCA] C:\Program Files\Linksys Wireless AG USB Wireless Network Monitor\InvokeSvc3.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MagicMatchSetup.exe] C:\DOCUME~1\Melissa\Desktop\MAGICM~1.EXE /r
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - Global Startup: Exif Launcher 2.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: RaptisoftGameLoader - http://real.gamehouse.com/games/rap...
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/pa...
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?Lin...
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.5) - http://housecall65.trendmicro.com/h...
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/res...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microso...
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yah...
O20 - Winlogon Notify: ekymws - C:\WINDOWS\ekymws.dll (file missing)
O20 - Winlogon Notify: pmnli - C:\WINDOWS\System32\pmnli.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\PACSPT~1.EXE
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SonicStageMonitoring - Sony Corporation - C:\Program Files\Common Files\Sony Shared\WMPlugIn\SonicStageMonitoring.exe
O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\halsv.exe
O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe
O23 - Service: Sony TVTA Manager - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\SMceMan.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
O23 - Service: VAIO Entertainment File Import Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VCSW\VCSW.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\IntegratedServer\HTTP (file missing)
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway Server (file missing)
O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Video\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing)
O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing)
O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\UPnPFramework.exe
O23 - Service: WUSB54AG - Unknown owner - C:\Program Files\Linksys Wireless AG USB Wireless Network Monitor\WLService.exe" "WUSB54AG.exe (file missing)

Thanks for the help so far!


Report Offensive Follow Up For Removal

Response Number 12
Name: jabuck
Date: October 25, 2006 at 04:02:54 Pacific
Reply:

Empty the restore folder. Go to start>control panel>system>system restore tab>check the box beside "turn off system restore>apply (takes a minute)>ok. Go back and uncheck the box to turn system restore back on>apply>ok.

Next, please reboot your computer in Safe Mode by doing the following :

Restart your computer

After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;

Instead of Windows loading as normal, a menu with options should appear;

Select the first option, to run Windows in Safe Mode, then press "Enter".

Choose your usual account.

Run Hijack This from safe mode, close all windows except Hijack This, place a check to the left of the following items and press "fix checked":

O2 - BHO: RawExecAction Object - {18898424-E3AB-4BA9-8E8D-5434B1CECA75} - C:\WINDOWS\System32\pmnli.dll (file missing)

O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)

O2 - BHO: (no name) - {849B9523-785F-4014-9CAF-079FB4A74C61} - C:\WINDOWS\system32\ijvuadri.dll (file missing)

O2 - BHO: (no name) - {86B0D5DC-02ED-4F9D-B70A-F9102278A8C7} - C:\WINDOWS\ekymws.dll (file missing)

O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)

O3 - Toolbar: &VSToolBar - {821F87FF-8245-4972-9E28-732E92EC2F51} - C:\Program Files\VSToolbar\VSToolBar.dll (file missing)

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

O20 - Winlogon Notify: ekymws - C:\WINDOWS\ekymws.dll (file missing)

O20 - Winlogon Notify: pmnli - C:\WINDOWS\System32\pmnli.dll (file missing)

Exit Hijack This but remain in safe mode

Navigate to and delete this folder if found:

C:\Program Files\VSToolbar

Run ATF-Cleaner from safe mode.Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

In Safe Mode, run AVG Anti-spyware and click on the Scanner tab at the top. Click the "Settings" tab and then change the recommended action to Quarantine and click Automatically generate report after every scan. Click back to the "Scan" tab and then click on Complete System Scan. This scan can take quite a while to run, so be prepared.

AVG Anti-Spyware will list any infections found on the left hand side. When the scan has finished, it will automatically set the recommended action. Click the Apply all actions button. AVG Anti-Spyware will display "All actions have been applied" on the right hand side.

Click on "Save Report", then "Save Report As". This will create a text file. Make sure you know where to find this file again (like on the Desktop).

Reboot to normal mode

Open notepad (Start Menu > Run > Type notepad and press "ok".

Copy and paste everything into notepad between the x's making regedit4 the top line.
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
REGEDIT4

[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ekymws]

[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\pmnli]

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Go to File on the top bar and choose" Save As", Change the "Save As Type" to All Files, Name it Fix.reg then save it to your desktop.

Double click Fix.reg (or right click and choose Merge) and it will ask if you want to merge the contents into the registry, choose Yes.

Post AVG-Antispyware report on your desktop, a new Combofix log and a new Hijack This log.

You java is out of date and was most likely the cause of your infection with Vundo. Download the latest version of http://java.sun.com/javase/downloads/index.jsp

Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".

Click the "Download" button to the right.

Check the box that says: "Accept License Agreement". The page will refresh.

Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.

Close any programs you may have running - especially your web browser.

Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java. Check any item with Java Runtime Environment (JRE or J2SE) in the name. It should have the "coffee cup" icon next to it.

Click the Remove or Change/Remove button. Repeat as many times as necessary to remove each Java versions.

Reboot your computer once all Java components are removed

. Then from your desktop double-click on jre-1_5_0_09-windowsi586-p.exe to install the newest version.

You should add "Spywareblaster" to your arsenol of antispyware tools, just do a google search for spywareblaster, download it,install it, and update it. Its free and runs in the background, so you don't actually run it, and re-writes malicious script before it can install on your computer. Look for updates weekly as there is no auto-update on the free version.


Report Offensive Follow Up For Removal

Response Number 13
Name: redslippahs
Date: October 26, 2006 at 08:36:03 Pacific
Reply:

AVG Report


AVG Anti-Spyware - Scan Report


+ Created at: 4:22:48 AM 10/26/2006

+ Scan result:

C:\Program Files\Common Files\Sandlot Shared\slghex.dll -> Adware.SpywareStorm : Cleaned.
C:\Downloads\DinerDashSetup-dm[1].exe -> Adware.Trymedia : Cleaned.
C:\Downloads\FruitStandSetup-dm[1].exe -> Adware.Trymedia : Cleaned.
C:\Downloads\PandaCraze-WinSetupRls-dm[1].exe -> Adware.Trymedia : Cleaned.
C:\Downloads\PlantasiaSetup-dm[1].exe -> Adware.Trymedia : Cleaned.
C:\Downloads\TriJinx_Setup-dm[1].exe -> Adware.Trymedia : Cleaned.
C:\Downloads\WZ_Setup_trymedia-dm[1].exe -> Adware.Trymedia : Cleaned.
C:\Downloads\zulu_gemsSetup-dm[1].exe -> Adware.Trymedia : Cleaned.
C:\WINDOWS\system32\SpOrder.dll -> Adware.WinAntiVirus : Cleaned.
:mozilla.588:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.589:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.590:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.591:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.79:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.79:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.79:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.79:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.81:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.81:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.81:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.81:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.81:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.81:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.82:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.82:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.82:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.82:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.82:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.82:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.86:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.86:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.86:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.86:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.86:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.87:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.87:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.87:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.87:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.87:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.87:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.88:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.88:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.88:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.88:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.88:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.88:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.89:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.89:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.89:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.90:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.90:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.91:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.92:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00359857.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00359883.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00360019.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00360021.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00360028.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00360302.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361132.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361134.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361789.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361790.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361793.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361795.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361819.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361820.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361822.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361823.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361826.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361828.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00361959.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00362333.TXT -> TrackingCookie.2o7 : Cleaned.
C:\RECYCLER\NPROTECT\00360301.TXT -> TrackingCookie.Addynamix : Cleaned.
:mozilla.729:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
C:\RECYCLER\NPROTECT\00362153.TXT -> TrackingCookie.Adjuggler : Cleaned.
C:\RECYCLER\NPROTECT\00362296.TXT -> TrackingCookie.Admarketplace : Cleaned.
:mozilla.618:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.619:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.620:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.22:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.24:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.25:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.26:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.27:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.28:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.28:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.30:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.30:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.31:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.31:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.32:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Adserver : Cleaned.
:mozilla.18:C:\Documents and Settings\Melissa\Application Data\Mozilla\Firefox\Profiles\ductgwm9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.19:C:\Documents and Settings\Melissa\Application Data\Mozilla\Firefox\Profiles\ductgwm9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.20:C:\Documents and Settings\Melissa\Application Data\Mozilla\Firefox\Profiles\ductgwm9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.21:C:\Documents and Settings\Melissa\Application Data\Mozilla\Firefox\Profiles\ductgwm9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.392:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.393:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.394:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.395:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.61:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.61:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.61:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.61:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.62:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.62:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.62:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.62:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.62:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.62:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.77:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.77:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.77:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.77:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.77:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.77:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.77:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.77:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.78:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.78:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.78:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.78:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.78:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.78:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.79:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.79:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.79:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.79:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.79:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.79:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.80:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.80:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.80:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.80:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.80:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.80:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.81:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.81:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.81:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.82:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.82:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.83:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.84:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Advertising : Cleaned.
C:\RECYCLER\NPROTECT\00359651.TXT -> TrackingCookie.Advertising : Cleaned.
C:\RECYCLER\NPROTECT\00359652.TXT -> TrackingCookie.Advertising : Cleaned.
C:\RECYCLER\NPROTECT\00359653.TXT -> TrackingCookie.Advertising : Cleaned.
C:\RECYCLER\NPROTECT\00359654.TXT -> TrackingCookie.Advertising : Cleaned.
C:\RECYCLER\NPROTECT\00360289.TXT -> TrackingCookie.Advertising : Cleaned.
C:\RECYCLER\NPROTECT\00360294.TXT -> TrackingCookie.Advertising : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.269:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.31:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.34:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Atdmt : Cleaned.
C:\RECYCLER\NPROTECT\00360305.TXT -> TrackingCookie.Atdmt : Cleaned.
C:\RECYCLER\NPROTECT\00361150.TXT -> TrackingCookie.Atdmt : Cleaned.
C:\RECYCLER\NPROTECT\00362351.TXT -> TrackingCookie.Atdmt : Cleaned.
:mozilla.777:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.826:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
C:\RECYCLER\NPROTECT\00360295.TXT -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.595:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.45:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.45:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.45:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.45:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.45:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.49:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.49:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.49:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.50:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.51:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.53:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Burstbeacon : Cleaned.
C:\RECYCLER\NPROTECT\00362158.TXT -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Burstnet : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Burstnet : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Burstnet : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Burstnet : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Burstnet : Cleaned.
:mozilla.47:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Burstnet : Cleaned.
:mozilla.50:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Burstnet : Cleaned.
:mozilla.50:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Burstnet : Cleaned.
:mozilla.50:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Burstnet : Cleaned.
:mozilla.51:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Burstnet : Cleaned.
:mozilla.52:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Burstnet : Cleaned.
:mozilla.54:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Burstnet : Cleaned.
:mozilla.641:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
C:\RECYCLER\NPROTECT\00362098.TXT -> TrackingCookie.Burstnet : Cleaned.
:mozilla.100:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.100:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.100:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.100:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.100:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.100:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.101:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.101:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.101:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.101:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.101:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.101:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.102:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.102:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.102:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.102:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.102:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.102:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.102:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.102:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.102:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.103:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.103:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.103:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.103:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.103:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.103:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.104:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.104:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.104:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.104:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.104:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.105:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.105:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.105:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.105:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.105:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.106:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.106:C:\RECYCLER\NPROTECT\00359957.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.106:C:\RECYCLER\NPROTECT\00359958.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.106:C:\RECYCLER\NPROTECT\00361371.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.106:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.106:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.107:C:\RECYCLER\NPROTECT\00359956.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.107:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.107:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.108:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.108:C:\RECYCLER\NPROTECT\00361683.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.109:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.110:C:\RECYCLER\NPROTECT\00361682.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\Documents and Settings\Melissa\Application Data\Mozilla\Firefox\Profiles\ductgwm9.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\Documents and Settings\Melissa\Application Data\Mozilla\Firefox\Profiles\ductgwm9.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.594:C:\Documents and Settings\Jason\Application Data\Mozilla\Firefox\Profiles\7s7zgmdx.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.98:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.98:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.98:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.98:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.99:C:\RECYCLER\NPROTECT\00359954.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.99:C:\RECYCLER\NPROTECT\00359955.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.99:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.99:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.99:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.99:C:\RECYCLER\NPROTECT\00361681.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.154:C:\RECYCLER\NPROTECT\00361372.MOZ -> TrackingCookie.Centrport : Cleaned.
:mozilla.154:C:\RECYCLER\NPROTECT\00361512.MOZ -> TrackingCookie.Centrport : Cleaned.
:mozilla.154:C:\RECYCLER\NPROTECT\00361513.MOZ -> TrackingCookie.Centrport : Cleaned.
: