omarramo12 Posted June 11, 2006 Report Share Posted June 11, 2006 So, I every time I restart my system there is about 360 megs of ram being used. This is right after the system restarts and with really nothing open except those icons in the lower right. This is starting to annoy me because im trying to play hl2 e1 and it freezes! I have a gig of ram and it freezes. So heres my hijack log. I want to get rid of everything that is not needed. Please help! Logfile of HijackThis v1.99.1Scan saved at 8:42:53 AM, on 6/11/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\Common Files\Symantec Shared\ccProxy.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Nhksrv.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exeC:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exeC:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\MMKeybd.exeC:\Program Files\Common Files\AOL\1142556039\ee\AOLSoftware.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\WINDOWS\CTHELPER.EXEC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\Program Files\Java\jre1.5.0_06\bin\jusched.exeC:\Program Files\Netropa\OSD.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc\DrgToDsc.exeC:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exeC:\Program Files\2Wire\2PortalMon.exeC:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exeC:\Program Files\iPod\bin\iPodService.exeC:\Program Files\Steam\Steam.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exeC:\Program Files\Common Files\Roxio Shared\SharedCOM8\CPSHelpRunner.exeC:\WINDOWS\system32\HPZipm12.exeC:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXEC:\WINDOWS\system32\taskmgr.exeC:\PROGRA~1\MOZILL~1\FIREFOX.EXEC:\Program Files\Messenger\msmsgs.exeC:\Documents and Settings\Omar\Desktop\HijackThis.exeO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dllO2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dllO3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO4 - HKLM\..\Run: [DellTouch] C:\WINDOWS\MMKeybd.exeO4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1142556039\ee\AOLSoftware.exeO4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -DelayO4 - HKLM\..\Run: [CTHelper] CTHELPER.EXEO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exeO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc\DrgToDsc.exe"O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exe"O4 - HKLM\..\Run: [2wSysTray] C:\Program Files\2Wire\2PortalMon.exeO4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exeO4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imAppO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [steam] "C:\Program Files\Steam\Steam.exe" -silentO4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quietO4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exeO4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exeO4 - Global Startup: hpoddt01.exe.lnk = ?O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLLO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CABO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1142371342906O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1142371382843O20 - Winlogon Notify: NavLogon - C:\WINDOWS\O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exeO23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeO23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXEO23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exeO23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exeO23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXEO23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exeO23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxLiveShare.exeO23 - Service: RoxMediaDB - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exeO23 - Service: RoxUpnpRenderer (RoxUPnPRenderer) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCom\RoxUpnpRenderer.exeO23 - Service: RoxUpnpServer - Sonic Solutions - C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exeO23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exeO23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe Link to post Share on other sites
Steamhead Posted June 12, 2006 Report Share Posted June 12, 2006 Welcome,Please follow the instructions provided, you may want to print out these instructions and use them as a reference.Please download ewido anti-malware it is a free version of the program.Install ewido anti-malwareWhen installing, under "Additional Options" uncheck..Install background guardInstall scan via context menu[*]Launch ewido, there should be an icon on your desktop, double-click it.[*]The program will now open to the main screen.[*]When you run ewido for the first time, you may get a warning "Database could not be found!". Click OK. We will fix this in a moment.[*]You will need to update ewido to the latest definition files.On the left hand side of the main screen click update.Then click on Start Update.[*]The update will start and a progress bar will show the updates being installed.(the status bar at the bottom will display ("Update successful")If you are having problems with the updater, you can use this link to manually update ewido.ewido manual updatesOnce the updates are installed do the following:Click on scannerClick on Complete System Scan and the scan will begin.You will be prompted to clean the first infection.Select "Perform action on all infections", then proceed.Once the scan has completed, there will be a button located on the bottom of the screen named Save reportClick Save report.Save the report .txt file to your desktop or a location where you can find it easily.Close ewido anti-malware.Please post the Ewido Report and a new HJT log.Thanks Link to post Share on other sites
omarramo12 Posted June 12, 2006 Author Report Share Posted June 12, 2006 Alright, i did all that.Here is my ewido log:--------------------------------------------------------- ewido anti-malware - Scan report--------------------------------------------------------- + Created on: 5:52:48 PM, 6/12/2006 + Report-Checksum: 279BC3C0 + Scan result: C:\Documents and Settings\Old_Drive2\Documents and Settings\Administrator\Cookies\[email protected][2].txt -> TrackingCookie.Pointroll : Cleaned with backup C:\Documents and Settings\Old_Drive2\Documents and Settings\Administrator\Cookies\administrator@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned with backup C:\Documents and Settings\Old_Drive2\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Z8PFBPCE\uninst[1].exe -> Downloader.VB.ge : Cleaned with backup C:\Documents and Settings\Old_Drive2\Documents and Settings\Dad\Local Settings\Temp\upd5.tmp/NE.dll -> Adware.SmartPops : Error during cleaning C:\Documents and Settings\Old_Drive2\Documents and Settings\Dad\Local Settings\Temp\upd5.tmp/NE.exe -> Adware.SmartPops : Error during cleaning C:\Documents and Settings\Old_Drive2\Documents and Settings\Mom\Local Settings\Temp\upd5.tmp/NE.dll -> Adware.SmartPops : Error during cleaning C:\Documents and Settings\Old_Drive2\Documents and Settings\Mom\Local Settings\Temp\upd5.tmp/NE.exe -> Adware.SmartPops : Error during cleaning :mozilla.16:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup :mozilla.22:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.24:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.25:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.27:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.28:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.32:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Realtracker : Cleaned with backup :mozilla.45:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup :mozilla.46:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup :mozilla.47:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.48:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.49:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.50:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.51:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.52:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.53:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.54:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.55:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.64:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.65:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.66:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.67:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.68:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.76:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.80:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.85:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.86:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.87:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.88:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.89:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.90:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.91:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.92:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.93:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.94:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.95:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.96:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.102:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.103:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.104:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.105:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.106:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.108:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.109:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.113:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.115:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.116:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup :mozilla.117:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.118:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.119:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.120:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.121:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.122:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.123:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.143:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.144:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.145:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.146:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.147:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.148:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.158:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.162:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.163:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.164:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.165:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.166:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup C:\Documents and Settings\Omar\Cookies\omar@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\Omar\Cookies\[email protected][2].txt -> TrackingCookie.Pointroll : Cleaned with backup C:\Documents and Settings\Omar\Cookies\omar@advertising[1].txt -> TrackingCookie.Advertising : Cleaned with backup C:\Documents and Settings\Omar\Cookies\omar@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup C:\Documents and Settings\Omar\Cookies\[email protected][2].txt -> TrackingCookie.Overture : Cleaned with backup C:\Documents and Settings\Omar\Cookies\omar@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup C:\Documents and Settings\Omar\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\Omar\Cookies\omar@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup C:\Documents and Settings\Omar\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\Omar\Cookies\[email protected][1].txt -> TrackingCookie.Overture : Cleaned with backup C:\Documents and Settings\Omar\Cookies\omar@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned with backup C:\Documents and Settings\Omar\Cookies\omar@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned with backup C:\Documents and Settings\Omar\Cookies\omar@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned with backup C:\Documents and Settings\Omar\Local Settings\Temp\Cookies\omar@advertising[1].txt -> TrackingCookie.Advertising : Cleaned with backup C:\Documents and Settings\Omar\Local Settings\Temp\Cookies\omar@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup C:\Documents and Settings\Omar\Local Settings\Temp\Cookies\[email protected][2].txt -> TrackingCookie.Goclick : Cleaned with backup C:\Documents and Settings\Omar\Local Settings\Temp\Cookies\omar@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup C:\Documents and Settings\Omar\Local Settings\Temp\Cookies\omar@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned with backup C:\Documents and Settings\Omar\Local Settings\Temp\Cookies\[email protected][1].txt -> TrackingCookie.Fastclick : Cleaned with backup C:\Documents and Settings\Omar\Local Settings\Temp\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup C:\Documents and Settings\Omar\Local Settings\Temp\Cookies\omar@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned with backup G:\Documents and Settings\Administrator\Cookies\[email protected][2].txt -> TrackingCookie.Pointroll : Cleaned with backup G:\Documents and Settings\Administrator\Cookies\administrator@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned with backup G:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Z8PFBPCE\uninst[1].exe -> Downloader.VB.ge : Cleaned with backup G:\Documents and Settings\Dad\Local Settings\Temp\upd5.tmp/NE.dll -> Adware.SmartPops : Error during cleaning G:\Documents and Settings\Dad\Local Settings\Temp\upd5.tmp/NE.exe -> Adware.SmartPops : Error during cleaning G:\Documents and Settings\Mom\Local Settings\Temp\upd5.tmp/NE.dll -> Adware.SmartPops : Error during cleaning G:\Documents and Settings\Mom\Local Settings\Temp\upd5.tmp/NE.exe -> Adware.SmartPops : Error during cleaning :mozilla.14:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Addynamix : Cleaned with backup :mozilla.15:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.16:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.17:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.18:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.19:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.20:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.21:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.22:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.23:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.24:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.25:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.26:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.27:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.28:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.29:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.30:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.31:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.32:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.33:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.34:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.35:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.36:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.37:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.38:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.39:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.40:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.41:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.42:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.43:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.44:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.45:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.46:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.47:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.48:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.49:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.50:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.51:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.52:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.53:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.54:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.55:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.56:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.57:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.58:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.59:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.60:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.61:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.62:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.63:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.64:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.66:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.67:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup :mozilla.68:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup :mozilla.69:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.70:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.71:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.72:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.73:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup :mozilla.88:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.89:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.92:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.93:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.94:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup :mozilla.97:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.98:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.99:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.100:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.101:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.102:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.103:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.104:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.105:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.106:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.107:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.108:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.109:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.110:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.111:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.112:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.113:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.114:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.115:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.116:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.117:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.118:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.119:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.120:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.121:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup :mozilla.122:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Centrport : Cleaned with backup :mozilla.123:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Centrport : Cleaned with backup :mozilla.124:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup :mozilla.125:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup :mozilla.139:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.140:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.141:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.142:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.143:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.144:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.145:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup :mozilla.146:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.147:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.148:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.149:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.150:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.151:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.161:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.162:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.163:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.164:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.165:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup :mozilla.168:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.169:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.170:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup :mozilla.196:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.197:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.198:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.204:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.205:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.206:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.207:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.208:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.209:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup :mozilla.211:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.212:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup :mozilla.213:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup :mozilla.214:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup :mozilla.218:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.219:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.220:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.221:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup :mozilla.224:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.225:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.226:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.227:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.228:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.229:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.230:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.231:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.232:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup :mozilla.233:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup :mozilla.239:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.240:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.245:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.246:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.251:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned with backup :mozilla.252:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned with backup :mozilla.253:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned with backup :mozilla.254:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned with backup :mozilla.255:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned with backup :mozilla.258:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup :mozilla.259:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.264:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.265:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.266:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.269:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup :mozilla.270:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.271:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.272:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.273:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.274:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup :mozilla.279:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.289:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup :mozilla.320:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.324:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.325:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.326:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup :mozilla.329:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.330:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.338:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup :mozilla.343:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.362:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Pro-market : Cleaned with backup :mozilla.363:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Pro-market : Cleaned with backup :mozilla.409:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Dbbsrv : Cleaned with backup :mozilla.413:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.414:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.415:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup :mozilla.418:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.419:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.423:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.424:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.425:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup :mozilla.427:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup :mozilla.428:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup :mozilla.434:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup :mozilla.439:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.440:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.441:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.442:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup :mozilla.460:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.479:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Euniverseads : Cleaned with backup :mozilla.483:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.484:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.485:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.486:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.487:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.488:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.490:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.491:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.492:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.493:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup :mozilla.498:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.500:G:\Documents and Settings Link to post Share on other sites
omarramo12 Posted June 13, 2006 Author Report Share Posted June 13, 2006 It seems like it cut off the rest of my post. I had my hijack log below that. What should i do about that? Link to post Share on other sites
Steamhead Posted June 13, 2006 Report Share Posted June 13, 2006 either you can continue on from where it left off in a new post, or you could copy it to a wordpad document and attach it to the post. If you don't know how to do that just tell me. Link to post Share on other sites
omarramo12 Posted June 13, 2006 Author Report Share Posted June 13, 2006 Here ya go::mozilla.500:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.524:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.525:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup :mozilla.537:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.538:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adocean : Cleaned with backup :mozilla.570:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.571:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.578:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adviva : Cleaned with backup :mozilla.579:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Adviva : Cleaned with backup :mozilla.617:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.618:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.619:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.620:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.621:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.622:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.623:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.624:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup :mozilla.657:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.658:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup :mozilla.681:G:\Documents and Settings\Omar Abudayyeh\Application Data\Mozilla\Firefox\Profiles\hjfx1uz9.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\omar abudayyeh@adtech[2].txt -> TrackingCookie.Adtech : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\omar [email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\omar [email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\omar abudayyeh@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\omar__abudayyeh@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\[email protected][2].txt -> TrackingCookie.Pointroll : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\omar__abudayyeh@com[2].txt -> TrackingCookie.Com : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\[email protected][1].txt -> TrackingCookie.Ru4 : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\omar__abudayyeh@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\[email protected][2].txt -> TrackingCookie.Fastclick : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\omar__abudayyeh@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Cookies\[email protected][1].txt -> TrackingCookie.Adserver : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Local Settings\Temp\Cookies\omar abudayyeh@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Local Settings\Temp\Cookies\omar abudayyeh@com[2].txt -> TrackingCookie.Com : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Local Settings\Temp\Cookies\omar abudayyeh@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Local Settings\Temp\Cookies\omar abudayyeh@hypertracker[2].txt -> TrackingCookie.Hypertracker : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Local Settings\Temp\Cookies\omar abudayyeh@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Local Settings\Temp\Cookies\omar abudayyeh@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Local Settings\Temp\Cookies\omar abudayyeh@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Local Settings\Temp\Cookies\omar [email protected][1].txt -> TrackingCookie.Incredifind : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Local Settings\Temp\Cookies\omar [email protected][1].txt -> TrackingCookie.Adserver : Cleaned with backup G:\Documents and Settings\Omar Abudayyeh\Local Settings\Temp\Temporary Internet Files\Content.IE5\FP1NM6QP\exitpoplight1[1].htm -> Trojan.NoClose.i : Cleaned with backup G:\Omar's Folder\Downloads\WinPlosion.exe -> Trojan.Tibia : Cleaned with backup G:\Overpro-347.exe -> Adware.AdSrve : Cleaned with backup G:\Program Files\WinPLOSION\WinPlosion.exe -> Trojan.Tibia : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3E89.tmp -> TrackingCookie.2o7 : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3E8C.tmp -> TrackingCookie.Ad-logics : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3E8E.tmp -> TrackingCookie.Specificclick : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3E91.tmp -> TrackingCookie.Bluestreak : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3E93.tmp -> TrackingCookie.Serving-sys : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3E94.tmp -> TrackingCookie.Burstnet : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3E95.tmp -> TrackingCookie.Casalemedia : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3E96.tmp -> TrackingCookie.Centrport : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3E9B.tmp -> TrackingCookie.Com : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3E9E.tmp -> TrackingCookie.Ru4 : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3E9F.tmp -> TrackingCookie.Euniverseads : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EA0.tmp -> TrackingCookie.Falkag : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EA1.tmp -> TrackingCookie.Fastclick : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EA3.tmp -> TrackingCookie.Gator : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EA5.tmp -> TrackingCookie.Hotlog : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EA6.tmp -> TrackingCookie.Hypertracker : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EA7.tmp -> TrackingCookie.Internetfuel : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EAA.tmp -> TrackingCookie.Paypopup : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EAB.tmp -> TrackingCookie.Paypopup : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EAD.tmp -> TrackingCookie.Questionmarket : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EAF.tmp -> TrackingCookie.Revenue : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EB0.tmp -> TrackingCookie.Serving-sys : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EB1.tmp -> TrackingCookie.Spylog : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EB2.tmp -> TrackingCookie.Statcounter : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EB4.tmp -> TrackingCookie.Trafficmp : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EB5.tmp -> TrackingCookie.Tribalfusion : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EB6.tmp -> TrackingCookie.Adserver : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq3EB7.tmp -> TrackingCookie.Zedo : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq44.tmp -> TrackingCookie.2o7 : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq4556.tmp -> TrackingCookie.Questionmarket : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq4557.tmp -> TrackingCookie.Adserver : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq46.tmp -> TrackingCookie.Casalemedia : Cleaned with backup G:\Program Files\Yahoo!\YPSR\Quarantine\ppq47.tmp -> TrackingCookie.Revenue : Cleaned with backup G:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP93\A0016203.pif -> Backdoor.SdBot.aad : Cleaned with backup G:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP93\A0016401.exe -> Adware.NewDotNet : Cleaned with backup G:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP93\A0016538.exe -> Adware.AdSrve : Cleaned with backup G:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP93\A0016608.exe -> Adware.AdSrve : Cleaned with backup G:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP93\A0016874.exe -> Adware.Look2Me : Cleaned with backup G:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP93\A0016991.dll -> Dropper.Small.abe : Cleaned with backup G:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP93\A0017684.exe -> Trojan.KillApp.f : Cleaned with backup G:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP93\A0017975.exe -> Adware.AdSrve : Cleaned with backup G:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP93\A0018021.exe -> Adware.AdSrve : Cleaned with backup G:\WINDOWS\Downloaded Program Files\gsda.dll -> Not-A-Virus.Downloader.Win32.SpyGame : Cleaned with backup::Report EndHijack log:Logfile of HijackThis v1.99.1Scan saved at 5:56:44 PM, on 6/12/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\Common Files\Symantec Shared\ccProxy.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Nhksrv.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exeC:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exeC:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\MMKeybd.exeC:\Program Files\Common Files\AOL\1142556039\ee\AOLSoftware.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\WINDOWS\CTHELPER.EXEC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\Program Files\Java\jre1.5.0_06\bin\jusched.exeC:\Program Files\Netropa\OSD.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc\DrgToDsc.exeC:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exeC:\Program Files\2Wire\2PortalMon.exeC:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exeC:\Program Files\iPod\bin\iPodService.exeC:\Program Files\Steam\Steam.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exeC:\Program Files\Common Files\Roxio Shared\SharedCOM8\CPSHelpRunner.exeC:\WINDOWS\system32\HPZipm12.exeC:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXEc:\program files\common files\aol\1142556039\ee\aim6.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\PROGRA~1\MOZILL~1\FIREFOX.EXEC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\ewido anti-malware\SecuritySuite.exeC:\WINDOWS\system32\NOTEPAD.EXEC:\Documents and Settings\Omar\Desktop\HijackThis.exeO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dllO2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dllO3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO4 - HKLM\..\Run: [DellTouch] C:\WINDOWS\MMKeybd.exeO4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1142556039\ee\AOLSoftware.exeO4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -DelayO4 - HKLM\..\Run: [CTHelper] CTHELPER.EXEO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exeO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc\DrgToDsc.exe"O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exe"O4 - HKLM\..\Run: [2wSysTray] C:\Program Files\2Wire\2PortalMon.exeO4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exeO4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imAppO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [steam] "C:\Program Files\Steam\Steam.exe" -silentO4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quietO4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exeO4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exeO4 - Global Startup: hpoddt01.exe.lnk = ?O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLLO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CABO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1142371342906O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1142371382843O20 - Winlogon Notify: NavLogon - C:\WINDOWS\O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exeO23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeO23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXEO23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exeO23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exeO23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXEO23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exeO23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxLiveShare.exeO23 - Service: RoxMediaDB - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exeO23 - Service: RoxUpnpRenderer (RoxUPnPRenderer) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCom\RoxUpnpRenderer.exeO23 - Service: RoxUpnpServer - Sonic Solutions - C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exeO23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exeO23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe Link to post Share on other sites
Steamhead Posted June 13, 2006 Report Share Posted June 13, 2006 (edited) Hello omarramo12, Your log is clean. I feel safe to say your problem is not malware related. You asked me to get rid of everything not neccasary, so I got a list of what you need. Please note: This is NOT malware, they are simply programs that may make startup take a little longer. It is COMPLETELY your choice to remove these or not. Please click on the link I provided next to each entry to find out what it does and make the decision yourself if you want to delete it or not. They may not solve your problem but it might help out a little. First off I would like you to move HJT to a permant folder should you want to restore any of these entries.STEP 1:You are currently using HijackThis from a temporary directory, this can cause problems.HijackThis creates backups, these are needed in case of any recovery issues.Please create a directory on your C:\ drive called C:\HJT, download and unzip HijackThis into that directory. Run the program from that directory from now on.STEPS For Creating Folder1. Please go to My Computer, open your C:\ drive, Select: New >> Folder and name the folder HJT.2. Download HijackThis to the new folder:3. Double Click on 'HijackThis.zip' to extract and install HijackThis.exe to the new folder.DO NOT MAKE ANY CHANGES OR CLICK "FIX CHECKED" UNTIL WE CHECK THE LOG, AS SOME OF THE FILES ARE LEGIT AND VITAL TO THE FUNCTION OF YOUR COMPUTERSTEP 2:Please open HJT. Place a check next to any entry you want to remove. ALL ARE OPTIONAL!! [BOLD= The Entry -- GREEN= link or description}O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE http://castlecops.com/s798-CTHELPER_EXE.htmlO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime "Allows access with the Quicktime tray icon"O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe "Automatically checks for java updates, can be done via going to the java website"O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot http://castlecops.com/s9749-realsched_exe.htmlO4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc\DrgToDsc.exe" http://castlecops.com/s3090-RoxioDragToDisc.htmlO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background http://castlecops.com/s2280-msmsgs_exe.htmlO4 - HKCU\..\Run: [steam] "C:\Program Files\Steam\Steam.exe" -silent http://castlecops.com/s4887-steam_exe.htmlO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe http://castlecops.com/s6852-reader_sl_exe.htmlO4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe http://castlecops.com/s1452-hpobnz08_exe.htmlOnce finished close out of everything and click on "Fix Checked". Please Reboot.STEP 3:Download and install CleanUp!NOTE: Do NOT run this program if you have XP Professional 64 bit edition. If you're unsure please do not run it!Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).Set the program up as follows:Click "Options..."Move the arrow down to "Custom CleanUp!"Put a check next to the following (Make sure nothing else is checked!):Empty Recycle BinsDelete CookiesDelete Prefetch files (if present)Cleanup! All UsersClick OKPress the CleanUp! button to start the program.It may ask you to log-off/reboot at the end, if it does please do so.Please post one more HJT log and one more Ewido log. Thanks! Edited June 13, 2006 by Steamhead Link to post Share on other sites
omarramo12 Posted June 25, 2006 Author Report Share Posted June 25, 2006 Here is my ewido log:--------------------------------------------------------- ewido anti-malware - Scan report--------------------------------------------------------- + Created on: 9:08:42 AM, 6/25/2006 + Report-Checksum: 818D330E + Scan result: HKLM\SOFTWARE\Classes\WUSN.1 -> Adware.SaveNow : Cleaned with backup C:\Documents and Settings\Old_Drive2\Documents and Settings\Dad\Local Settings\Temp\upd5.tmp/NE.dll -> Adware.SmartPops : Cleaned with backup C:\Documents and Settings\Old_Drive2\Documents and Settings\Dad\Local Settings\Temp\upd5.tmp/NE.exe -> Adware.SmartPops : Cleaned with backup C:\Documents and Settings\Old_Drive2\Documents and Settings\Mom\Local Settings\Temp\upd5.tmp/NE.dll -> Adware.SmartPops : Cleaned with backup C:\Documents and Settings\Old_Drive2\Documents and Settings\Mom\Local Settings\Temp\upd5.tmp/NE.exe -> Adware.SmartPops : Cleaned with backup :mozilla.6:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.7:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup :mozilla.8:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.9:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.10:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.11:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup :mozilla.17:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup :mozilla.24:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.25:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.26:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.27:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.28:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup :mozilla.29:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Addynamix : Cleaned with backup :mozilla.31:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.32:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.34:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup :mozilla.52:C:\Documents and Settings\Omar\Application Data\Mozilla\Firefox\Profiles\j0h20w26.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup C:\Documents and Settings\Omar\Cookies\omar@advertising[2].txt -> TrackingCookie.Advertising : Cleaned with backup C:\Documents and Settings\Omar\Cookies\omar@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned with backup G:\Documents and Settings\Dad\Local Settings\Temp\upd5.tmp/NE.dll -> Adware.SmartPops : Error during cleaning G:\Documents and Settings\Dad\Local Settings\Temp\upd5.tmp/NE.exe -> Adware.SmartPops : Error during cleaning G:\Documents and Settings\Mom\Local Settings\Temp\upd5.tmp/NE.dll -> Adware.SmartPops : Error during cleaning G:\Documents and Settings\Mom\Local Settings\Temp\upd5.tmp/NE.exe -> Adware.SmartPops : Error during cleaning G:\System Volume Information\_restore{63474C07-7346-4B78-88C2-5B8B414A2AC3}\RP113\A0011112.exe -> Downloader.VB.ge : Cleaned with backup G:\System Volume Information\_restore{63474C07-7346-4B78-88C2-5B8B414A2AC3}\RP113\A0011113.exe -> Trojan.Tibia : Cleaned with backup G:\System Volume Information\_restore{63474C07-7346-4B78-88C2-5B8B414A2AC3}\RP113\A0011114.exe -> Adware.AdSrve : Cleaned with backup G:\System Volume Information\_restore{63474C07-7346-4B78-88C2-5B8B414A2AC3}\RP113\A0011115.exe -> Trojan.Tibia : Cleaned with backup G:\System Volume Information\_restore{63474C07-7346-4B78-88C2-5B8B414A2AC3}\RP113\A0011116.dll -> Not-A-Virus.Downloader.Win32.SpyGame : Cleaned with backup Link to post Share on other sites
omarramo12 Posted June 25, 2006 Author Report Share Posted June 25, 2006 Here is my hijack log:Logfile of HijackThis v1.99.1Scan saved at 9:09:54 AM, on 6/25/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\Common Files\Symantec Shared\ccProxy.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Nhksrv.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exeC:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exeC:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\MMKeybd.exeC:\Program Files\Common Files\AOL\1142556039\ee\AOLSoftware.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\WINDOWS\CTHELPER.EXEC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\Program Files\Netropa\OSD.exeC:\Program Files\Java\jre1.5.0_06\bin\jusched.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc\DrgToDsc.exeC:\Program Files\iPod\bin\iPodService.exeC:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exeC:\Program Files\2Wire\2PortalMon.exeC:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exeC:\Program Files\Steam\Steam.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exeC:\Program Files\Common Files\Roxio Shared\SharedCOM8\CPSHelpRunner.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exeC:\WINDOWS\system32\HPZipm12.exeC:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\Program Files\ATI Technologies\ATI.ACE\cli.exeC:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXEC:\Program Files\Real\RealPlayer\RealPlay.exec:\program files\common files\aol\1142556039\ee\aim6.exeC:\PROGRA~1\MOZILL~1\FIREFOX.EXEC:\HJT\HijackThis.exeO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dllO2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dllO3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dllO4 - HKLM\..\Run: [DellTouch] C:\WINDOWS\MMKeybd.exeO4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1142556039\ee\AOLSoftware.exeO4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -DelayO4 - HKLM\..\Run: [CTHelper] CTHELPER.EXEO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exeO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy Media Creator 8\Drag to Disc\DrgToDsc.exe"O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatchTray.exe"O4 - HKLM\..\Run: [2wSysTray] C:\Program Files\2Wire\2PortalMon.exeO4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exeO4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imAppO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [steam] "C:\Program Files\Steam\Steam.exe" -silentO4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quietO4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exeO4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exeO4 - Global Startup: hpoddt01.exe.lnk = ?O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLLO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CABO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1142371342906O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1142371382843O20 - Winlogon Notify: NavLogon - C:\WINDOWS\O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exeO23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exeO23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exeO23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeO23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exeO23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXEO23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exeO23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exeO23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXEO23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exeO23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxLiveShare.exeO23 - Service: RoxMediaDB - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxMediaDB.exeO23 - Service: RoxUpnpRenderer (RoxUPnPRenderer) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCom\RoxUpnpRenderer.exeO23 - Service: RoxUpnpServer - Sonic Solutions - C:\Program Files\Roxio\Easy Media Creator 8\Digital Home\RoxUpnpServer.exeO23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\SharedCOM8\RoxWatch.exeO23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeO23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeO23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe.. Link to post Share on other sites
Steamhead Posted June 27, 2006 Report Share Posted June 27, 2006 hmm ... Seems we didn't get all the cookies.Please download ATF Cleaner by Atribune.This program is for XP and Windows 2000 onlyDouble-click ATF-Cleaner.exe to run the program.Under Main choose: Select AllClick the Empty Selected button.If you use Firefox browserClick Firefox at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browserClick Opera at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.For Technical Support, double-click the e-mail address located at the bottom of each menu.Please go HERE to run Panda's ActiveScanOnce you are on the Panda site click the Scan your PC buttonA new window will open...click the Check Now buttonEnter your CountryEnter your State/ProvinceEnter your e-mail address and click sendSelect either Home User or CompanyClick the big Scan Now buttonIf it wants to install an ActiveX component allow itIt will start downloading the files it requires for the scan (Note: It may take a couple of minutes)When download is complete, click on My Computer to start the scanWhen the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report Link to post Share on other sites
Matt Posted July 11, 2006 Report Share Posted July 11, 2006 Inactive topic...If you still need help on this problem, contact me or one of the Moderators to re-open this up.Topic closed. Link to post Share on other sites
Recommended Posts