Author Topic: Sound/Virus  (Read 279 times)

Offline bluestar

  • Newbie
  • *
  • Posts: 29
  • Karma: +0/-0
    • View Profile
Sound/Virus
« on: September 29, 2006, 03:38:31 PM »
"I had you run an online virus scanner because you aren't running your own on your system
Ewido should remove some of those files for you, plus we should of had you install a Virus scanner
But, scanning the Internet, I see you have been warned about this in the past on other forums
I guess no one can get through to you
Seems you know best>>>but looking at your kaspersky's log, you really don't
I'm locking this as you have not done the last set of instructions
Hopefully someone can talk you into properly protecting your computer"



No disrespect. And btw, I have never been warned before about programs. I think you have me confused for someone else. I cannot get to safe mode on my computer anymore, it is not there, so I conducted this in regular mode. I uninstalled Java and I ran both Ewido and a fresh Hijack log. I still cannot get sound on internet. Here are the reports:

HiJack:
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5700.0006)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\Documents and Settings\Owner\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp_adb.../search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul...rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=552...cid={SUB_CLCID}
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha...t/c381/chat.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {E9348280-2D74-4933-BE25-73D946926795} (DeviceEnum Class) - http://h20270.www2.hp.com/ediags/gmn/insta...cdetection3.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)



Ewido:
+ Scan result:   



C:\Old_HD\Documents and Settings\CM\Local Settings\Temporary Internet Files\Content.IE5\G1EBOTAF\IeBHOs[1].dll -> Adware.E2Give : Cleaned with backup (quarantined).
C:\Old_HD\Program Files\E2G\IeBHOs.dll -> Adware.E2Give : Cleaned with backup (quarantined).
C:\Old_HD\Documents and Settings\CM\Local Settings\Temporary Internet Files\Content.IE5\XN1GJUL6\MegaInstaller[1].exe -> Adware.MetaDirect : Cleaned with backup (quarantined).
C:\Old_HD\WINDOWS\Downloaded Program Files\UGO20.exe -> Downloader.Small : Cleaned with backup (quarantined).
C:\Old_HD\Documents and Settings\CM\Local Settings\Temporary Internet Files\Content.IE5\6BIBA1EN\pi[2].exe -> Downloader.Small.afq : Cleaned with backup (quarantined).
C:\Old_HD\Documents and Settings\CM\Local Settings\Temp\MegaHost.dll -> Hijacker.StartPage.rn : Cleaned with backup (quarantined).
C:\Old_HD\Documents and Settings\CM\Local Settings\Temp\MegaInstaller.exe -> Hijacker.StartPage.rn : Cleaned with backup (quarantined).
C:\Old_HD\Documents and Settings\CM\Local Settings\Temporary Internet Files\Content.IE5\0GIQV0ZG\MegaInstaller[1].exe -> Hijacker.StartPage.rn : Cleaned with backup (quarantined).
:mozilla.643:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.100:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.101:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.102:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.103:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.104:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.105:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.106:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.107:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.108:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.109:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.110:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.111:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.112:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.113:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.114:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.115:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.116:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.117:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.118:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.119:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.120:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.121:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.122:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.123:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.124:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.125:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.126:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.127:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.128:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.129:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.130:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.131:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.132:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.133:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.134:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.135:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.136:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.137:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.138:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.139:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.140:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.141:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.142:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.168:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.169:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.172:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.173:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.174:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.175:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.176:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.177:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.178:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.179:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.180:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.181:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.182:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.183:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.184:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.185:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.186:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.187:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.188:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.189:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.190:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.191:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.192:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.193:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.194:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.195:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.196:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.197:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.198:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.199:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.200:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.201:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.204:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.205:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.588:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.93:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.94:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.95:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.96:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.97:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.98:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.99:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Owner\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.677:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.678:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.679:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.434:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Addynamix : Cleaned.
:mozilla.367:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adengage : Cleaned.
:mozilla.368:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adengage : Cleaned.
:mozilla.369:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adengage : Cleaned.
:mozilla.396:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.397:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.398:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.399:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.400:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.401:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.402:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.681:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.682:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.683:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.684:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.72:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.73:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.74:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.75:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.76:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.77:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.519:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.520:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.100:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.101:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.102:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.103:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.104:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.105:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.106:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.107:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.108:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.109:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.110:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.111:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.112:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.113:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.114:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.115:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.116:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.117:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.118:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.119:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.120:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.121:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.122:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.123:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.124:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.125:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.126:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.127:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.128:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.129:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.71:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.73:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.77:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.80:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.81:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.82:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.83:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.84:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.85:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.86:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.87:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.88:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.89:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.90:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.91:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.92:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.93:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.94:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.95:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.96:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.97:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.98:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.99:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.21:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.22:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.34:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\Owner\Cookies\owner@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.561:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.562:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.563:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.89:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.450:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.545:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.683:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.208:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.682:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.212:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.427:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.428:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.429:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.431:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.10:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.11:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.15:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.16:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.17:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.403:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.404:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.405:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.406:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.407:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.408:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.409:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.410:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.7:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.8:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.9:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.304:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Centrport : Cleaned.
:mozilla.305:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Centrport : Cleaned.
:mozilla.306:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Centrport : Cleaned.
:mozilla.307:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Centrport : Cleaned.
:mozilla.308:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Centrport : Cleaned.
:mozilla.411:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Clickagents : Cleaned.
:mozilla.412:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Clickagents : Cleaned.
:mozilla.413:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Clickagents : Cleaned.
:mozilla.414:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Clickagents : Cleaned.
:mozilla.415:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Clickagents : Cleaned.
:mozilla.482:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.397:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.398:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.557:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.484:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Commission-junction : Cleaned.
:mozilla.485:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Commission-junction : Cleaned.
:mozilla.501:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.804:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.35:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.58:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.59:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\Owner\Cookies\owner@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.281:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Euniverseads : Cleaned.
:mozilla.284:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Euniverseads : Cleaned.
:mozilla.362:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.441:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.442:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.452:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.453:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.454:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.455:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.715:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.716:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.717:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.718:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.321:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.322:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.323:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.324:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.325:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.326:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.327:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.328:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.329:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.330:C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\x0kfxm08.Default User\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.54:C:\Old_HD\Documents and Settings\CM\Application Data\Mozilla\Firefox\Profiles\4zwakrus.d

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Sound/Virus
« Reply #1 on: September 29, 2006, 05:10:33 PM »
Very sorry for the confusion, I must of mixed your username with another
I apologize

Can you do the following please
==Download this file - Combofix.exe and save it too desktop
Double click combofix.exe & follow the prompts.
When finished, it shall produce a log for you.
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

In addition
RIGHT CLICK on Hijackthis.exe on your desktop and RENAME it too
bluestar.exe

Run a fresh scan and save logfile with bluestar.exe (Hijackthis) and post the fresh log please

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline bluestar

  • Newbie
  • *
  • Posts: 29
  • Karma: +0/-0
    • View Profile
Sound/Virus
« Reply #2 on: September 30, 2006, 12:15:05 AM »
No worries, just glad for no more confusion! And thankyou for the help btw.

OK, here is the Hijack log:
Scan saved at 1:12:05 AM, on 9/30/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5700.0006)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Owner\Desktop\bluestar.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp_adb.../search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul...rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=552...cid={SUB_CLCID}
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha...t/c381/chat.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {E9348280-2D74-4933-BE25-73D946926795} (DeviceEnum Class) - http://h20270.www2.hp.com/ediags/gmn/insta...cdetection3.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSSQL$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe" -sMICROSOFTSMLBIZ (file missing)
O23 - Service: SQLAgent$MICROSOFTSMLBIZ - Unknown owner - C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlagent.EXE" -i MICROSOFTSMLBIZ (file missing)



and the Combofix log:

ComboFix 06.09.28 - Running from: "C:\Documents and Settings\Owner\Desktop"

(((((((((((((((((((((((((((((((   Files Created from 2006-08-30 to 2006-09-30  ))))))))))))))))))))))))))))))))))
 

2006-09-13   04:33   121,856   ---------   C:\WINDOWS\system32\xmllite.dll
 

((((((((((((((((((((((((((((((((((((((((((((((((   Find3M Report   )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-09-30 01:04   --------   d--------   C:\Program Files\Mozilla Firefox
2006-09-29 14:17   --------   d--------   C:\Program Files\ewido anti-spyware 4.0
2006-09-29 14:14   --------   d--------   C:\Program Files\Common Files
2006-09-13 04:40   --------   d--------   C:\Program Files\Internet Explorer
2006-09-13 04:01   --------   d--------   C:\Program Files\SP23455
2006-09-13 03:58   --------   d--------   C:\Program Files\CONEXANT
2006-09-10 20:05   --------   d--------   C:\Program Files\LimeWire
2006-09-02 17:07   --------   d--------   C:\Program Files\DivX
2006-08-23 00:31   5906432   ---------   C:\WINDOWS\system32\ieframe.dll
2006-08-23 00:31   50688   ---------   C:\WINDOWS\system32\msfeedsbs.dll
2006-08-23 00:31   457728   ---------   C:\WINDOWS\system32\msfeeds.dll
2006-08-23 00:31   413696   --a------   C:\WINDOWS\system32\vbscript.dll
2006-08-23 00:31   225792   --a------   C:\WINDOWS\system32\webcheck.dll
2006-08-23 00:31   175616   ---------   C:\WINDOWS\system32\ieui.dll
2006-08-23 00:31   152064   --a------   C:\WINDOWS\system32\msls31.dll
2006-08-23 00:18   78336   --a------   C:\WINDOWS\system32\ieencode.dll
2006-08-23 00:18   206336   ---------   C:\WINDOWS\system32\WinFXDocObj.exe
2006-08-23 00:17   40448   --a------   C:\WINDOWS\system32\licmgr10.dll
2006-08-23 00:17   105472   --a------   C:\WINDOWS\system32\url.dll
2006-08-23 00:17   100352   --a------   C:\WINDOWS\system32\occache.dll
2006-08-23 00:16   16896   --a------   C:\WINDOWS\system32\corpol.dll
2006-08-23 00:14   378368   --a------   C:\WINDOWS\system32\iedkcs32.dll
2006-08-23 00:14   229376   --a------   C:\WINDOWS\system32\ieaksie.dll
2006-08-23 00:13   71680   --a------   C:\WINDOWS\system32\admparse.dll
2006-08-23 00:13   55296   --a------   C:\WINDOWS\system32\iesetup.dll
2006-08-23 00:13   54784   --a------   C:\WINDOWS\system32\ie4uinit.exe
2006-08-23 00:13   43008   --a------   C:\WINDOWS\system32\iernonce.dll
2006-08-23 00:13   152064   --a------   C:\WINDOWS\system32\ieakeng.dll
2006-08-23 00:13   122880   --a------   C:\WINDOWS\system32\advpack.dll
2006-08-23 00:13   11776   --a------   C:\WINDOWS\system32\ieudinit.exe
2006-08-23 00:11   12288   ---------   C:\WINDOWS\system32\msfeedssync.exe
2006-08-23 00:10   61440   ---------   C:\WINDOWS\system32\icardie.dll
2006-08-23 00:10   35328   --a------   C:\WINDOWS\system32\imgutil.dll
2006-08-23 00:09   262656   ---------   C:\WINDOWS\system32\iertutil.dll
2006-08-23 00:07   45568   --a------   C:\WINDOWS\system32\mshta.exe
2006-08-22 23:37   48128   --a------   C:\WINDOWS\system32\mshtmler.dll
2006-08-22 23:36   380928   ---------   C:\WINDOWS\system32\ieapfltr.dll
2006-08-22 23:30   161792   --a------   C:\WINDOWS\system32\ieakui.dll
2006-08-21 08:21   16896   --a------   C:\WINDOWS\system32\fltlib.dll
2006-08-21 05:14   23040   --a------   C:\WINDOWS\system32\fltmc.exe
2006-08-21 05:14   128896   ---------   C:\WINDOWS\system32\drivers\fltmgr.sys
2006-08-10 19:46   22752   --a------   C:\WINDOWS\system32\spupdsvc.exe
2006-07-27 09:24   679424   --a------   C:\WINDOWS\system32\inetcomm.dll
2006-07-21 04:24   72704   --a------   C:\WINDOWS\system32\hlink.dll
 

((((((((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))
 
*Note* empty entries are not shown

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Yahoo! Pager"="\"C:\\Program Files\\Yahoo!\\Messenger\\ypager.exe\" -quiet"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\"  -osboot"
"SynTPLpr"="C:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe"
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="C:\\Program Files\\iTunes\\iTunesHelper.exe"
"CARPService"="carpserv.exe"
"ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\
  00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
  ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,f2,01,00,00,23,00,00,00,7c,00,00,00,72,00,\
  00,00,01,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="ewido anti-spyware 4.0"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"


HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders
securityproviders REG_SZ  msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll

 
Completion time: Sat 09/30/2006  1:07:52.92
ComboFix.txt

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Sound/Virus
« Reply #3 on: September 30, 2006, 10:38:57 AM »
  • Download the latest version of  Java Runtime Environment (JRE) 5.0 Update 9.
  • Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
  • Click the "Download" button to the right.
  • Check the box that says: "Accept License Agreement[/i]".
  • The page will refresh.
  • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
Double click the installer on desktop, follow the prompts
Once you have the newest version installed, you can delete the installer

Are you still having problems with sound on websites?
Does this happen in both IE7 and Firefox?
What version of Firefox are you using?

Can you give me an example of a website you are having problems with
Do you have sound when you play CD's, etc...?
« Last Edit: September 30, 2006, 11:49:36 AM by guestolo »

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline bluestar

  • Newbie
  • *
  • Posts: 29
  • Karma: +0/-0
    • View Profile
Sound/Virus
« Reply #4 on: September 30, 2006, 04:08:07 PM »
I have sound on CD's, Realplayer, Limewire, Quicktime, and Windows Media Player, but not on sites like Myspace, Youtube, etc. I can download files from Youtube to Keepvid and open it with VLC Media Player and get sound, but I cannot get sound on it's own when simply going to the page and trying to listen to it there.

In my Control Panel, I see the Volume under past history and it is listed as being (muted). I have checked the sound devices and made sure everything was not muted. And that does register for the programs I have listed above. I then checked under the control panel/past actions to show the sound icon on all the time, but it still will not show up as an icon on my toolbar and also will not let me hear sound on the internet. I tested this out with both IE7 and Firefox. I am stumped as to what move to make next! Do you think the OS needs to be repaired?

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Sound/Virus
« Reply #5 on: September 30, 2006, 04:30:37 PM »
You didn't let me know what Firefox version your running?
Can you do the following for me please
Create a .bat file for me

Open Notepad (START>>>RUN>>>type in notepad)
Hit OK
Copy the contents of the CODE box, not including the word "code"
Paste it to the empty Notepad file
In Notepad click FILE>>SAVE AS
Change the Save as Type to All Files.
Name the file as export.bat

Save this file on the desktop
Ensure to copy from REGEDIT4 and down in the code box

 
Code: [Select]
regedit /e Export.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32"

Double click on export.bat and a text file will open
Copy>>Paste back here the whole contents please

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline bluestar

  • Newbie
  • *
  • Posts: 29
  • Karma: +0/-0
    • View Profile
Sound/Virus
« Reply #6 on: September 30, 2006, 07:25:01 PM »
I have Firefox 1.5

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"="C:\\WINDOWS\\system32\\l3codeca.acm"
"wave"="wdmaud.drv"
"midi"="wdmaud.drv"
"mixer"="wdmaud.drv"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server\RDP]
"wave"="rdpsnd.dll"
"MaxBandwidth"=dword:000056b9
"wavemapper"="msacm32.drv"
"EnableMP3Codec"=dword:00000001
"midimapper"="midimap.dll"

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Sound/Virus
« Reply #7 on: September 30, 2006, 07:55:07 PM »
Can you try the following for me please
Create a .reg file
Open Notepad (START>>>RUN>>>type in notepad)
Hit OK
Copy the contents of the CODE box, not including the word "code"
Paste it to the empty Notepad file
In Notepad click FILE>>SAVE AS
IMPORTANT>>>Change the Save as Type to All Files.
Name the file as fix.reg

Save this file on the desktop
Ensure to copy from REGEDIT4 and down in the code box

 
Code: [Select]
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"wavemapper"="msacm32.drv"


Close down all browser windows that are open
Double click on fix.reg and allow to add/merge to the registry at the prompt

Reboot the computer
Back in Windows
Try a site such as Youtube and see if you get sound

Also, can you double click on Export.bat again and post the contents again
Quote
I have Firefox 1.5
Is it just 1.5 or 1.5.0.7
In firefox click on Help>>About Mozilla firefox

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline bluestar

  • Newbie
  • *
  • Posts: 29
  • Karma: +0/-0
    • View Profile
Sound/Virus
« Reply #8 on: October 03, 2006, 08:39:13 PM »
It worked!! Thankyou thankyou thankyou!!!!  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\':D\' />  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\':D\' />  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\':D\' />

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Sound/Virus
« Reply #9 on: October 08, 2006, 01:32:01 PM »
Glad to help
and glad it worked, I got some help from the firefox forums  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/smile.gif\' class=\'bbc_emoticon\' alt=\':)\' />

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here