[Rik111]

heyo any1 that can help me... here's the story- i was searchin around for a keygen for neverwinter... yah dumb i know... so i click on some random link and it downloads something... i open it and it disappears... since then i've been getting critical warning virus alert in my bottom right hand of my taskbar... i ran ewido, spybot, ad-aware, and AVG trial (together they supposedly got about 500 bad files)... needless to say it's still here. here's my HJT...

Logfile of HijackThis v1.99.1
Scan saved at 6:21:55 PM, on 4/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\mssearchnet.exe
C:\Documents and Settings\Compaq_Owner\Application Data\??stem32\?poolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\!update.exe
C:\WINDOWS\system32\ICROSO~1.NET\wuauboot.exe
C:\Program Files\Trillian\trillian.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Compaq_Owner\Desktop\HijackThis.exe

O4 - HKCU\..\Run: [Jdsf] C:\Documents and Settings\Compaq_Owner\Application Data\??stem32\?poolsv.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Srro] "C:\WINDOWS\system32\ICROSO~1.NET\wuauboot.exe" -vt ndrv
O20 - Winlogon Notify: winwil32 - winwil32.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe


ok then... any help would be awesome
Rik

[Edit 1]PS- well im not getting the warning anymore after the last reboot... maybe i fixed it. that'd be cool
[Edit 2]PPS- uh oh the mssearchnet.exe thing is still going... help!

Edited by Rik111, 25 April 2006 - 05:23 AM.

[Advertisements]

Hi Rik111 I am working with the GeekU staff to get your computer clean again. I will post back instructions momentarily.

[williesbest2]

Hi Rik111 I am working with the GeekU staff to get your computer clean again. I will post back instructions momentarily.

[williesbest2]

Hi Rik111.

I have a question for you:

1. Did you fix ANYTHING with HijackThis, because you have an extremely small logfile.

Please post the answer to this question, along with an updated HijackThis log

[Rik111]

yeah i did... about 80% of the stuff... when i start my computer i have to ctrl+alt+del to shut off some processes that i think i dont need... i saw them in the HJT program so i went "ooh! i wont have to shut those off anymore" is that bad?
Rik
PS- here's the new hjt

Logfile of HijackThis v1.99.1
Scan saved at 7:36:57 PM, on 4/25/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Compaq_Owner\Application Data\??stem32\?poolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Compaq_Owner\Desktop\kjashdfkjadsfk\VDC109\Project VDC.exe
C:\Program Files\Steam\steam.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ICROSO~1.NET\wuauboot.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Compaq_Owner\Desktop\HijackThis.exe

O4 - HKCU\..\Run: [Jdsf] C:\Documents and Settings\Compaq_Owner\Application Data\??stem32\?poolsv.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Srro] "C:\WINDOWS\system32\ICROSO~1.NET\wuauboot.exe" -vt ndrv
O4 - HKCU\..\Run: [warez] "C:\Program Files\Warez P2P Client\warez.exe" -h
O20 - Winlogon Notify: winwil32 - winwil32.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

Edited by Rik111, 25 April 2006 - 06:39 PM.

[williesbest2]

Hi Rik111, you are going to have to restore the backups in order for me to help you, sorry. Please do not Control Alt Delete any entries from now until the end of the fix.

1. Restore backups
To restore the backups:

• Open HiJackThis
• Click on "View the list of Backups"
• Place a check mark next to everything in that window
• Click Restore
• Click Yes
• Reboot your computer
• Run HiJackThis and post a new HiJackThis log for review.

Please post an updated HijackThis log

Edited by williesbest2, 25 April 2006 - 06:54 PM.

[Rik111]

here we go

Logfile of HijackThis v1.99.1
Scan saved at 12:45:57 PM, on 4/30/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe
C:\Documents and Settings\Compaq_Owner\Application Data\??stem32\?poolsv.exe
C:\WINDOWS\system32\ICROSO~1.NET\wuauboot.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trillian\trillian.exe
C:\Documents and Settings\Compaq_Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...arm1=seconduser
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...arm1=seconduser
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.h...arm1=seconduser
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...arm1=seconduser
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...arm1=seconduser
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.h...arm1=seconduser
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...arm1=seconduser
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.searchnug.../sn_sidebar.php
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Nothing - {edbf1bc8-39ab-48eb-a0a9-c75078eb7c8e} - C:\WINDOWS\system32\hp8D01.tmp
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKLM\..\Run: [WinProfile] sndcfg16.exe
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwsoemon.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\5.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\RunServices: [WinProfile] sndcfg16.exe
O4 - HKCU\..\Run: [Jdsf] C:\Documents and Settings\Compaq_Owner\Application Data\??stem32\?poolsv.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Srro] "C:\WINDOWS\system32\ICROSO~1.NET\wuauboot.exe" -vt yax
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwsoemon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: &Search - http://edits.mywebse...html?p=ZNfox000
O8 - Extra context menu item: Download all by Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download by Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Download selected by Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site by Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winwil32 - winwil32.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe


there ya go ^^
hope you can fix me up
Rik

[williesbest2]

You didn't delete any files did you? As in go searching for the files and delete them, right?

[Rik111]

no i did not... i wouldnt know what i was doing... (but i did take a look in the windows folder... but still didnt touch anything)
Rik
PS- i ran adaware as i said before along with spybot... maybe those deleted something...?

[williesbest2]

Hi Rik111. Please do the following:

1. Remove Smitfraud
Download smitRem.exe ©noahdfear, and save the file to your desktop.
Double click on the file to extract it to it's own folder on the desktop.

Place a shortcut to Panda ActiveScan on your desktop (in Internet Explorer, right click on Panda ActiveScan link select "Copy Shortcut" then right click on your desktop and select "Paste Shortcut" or in FireFox right-click the link and select "Save Link As" and save it to your desktop).

Please download the trial version of ewido anti-malware here:
http://www.ewido.net/en/download/

Please read Ewido Setup Instructions
Install it, and update the definitions to the newest files. Do NOT run a scan yet.

If you have not already installed Ad-Aware SE 1.06, follow these download and setup instructions, otherwise, check for updates:
Ad-Aware SE Setup
Don't run it yet!

Next, please reboot your computer in SafeMode by doing the following:

• Restart your computer
• After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
• Instead of Windows loading as normal, a menu should appear
• Select the first option, to run Windows in Safe Mode.

Open the smitRem folder, then double click the RunThis.bat file to start the tool. Follow the prompts on screen.
Wait for the tool to complete and disk cleanup to finish.

The tool will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply.


Open Ad-aware and do a full scan. Remove all it finds.


Run Ewido:

• Click on scanner
• Click on Complete System Scan and the scan will begin.
• While the scan is in progress you will be prompted to clean files, click OK
• When it asks if you want to clean the first file, put a check in the lower left corner of the box that says "Perform action on all infections" then choose clean and click OK.
• Once the scan has completed, there will be a button located on the bottom of the screen named Save report
• Click Save report.
• Save the report .txt file to your desktop.

Close ewido anti-malware.

Next go to Control Panel click Display > Desktop > Customize Desktop > Web > Uncheck "Security Info" if present.

Reboot back into Windows and click the Panda ActiveScan shortcut.

• Once you are on the Panda site click the Scan your PC button.
• A new window will open...click the Check Now button.
  • Enter your Country
  • Enter your State/Province
  • Enter your e-mail address and click send
  • Select either Home User or Company
  • Click the big Scan Now button
• If it wants to install an ActiveX component allow it
• It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
• When the download is complete, click on My Computer to start the scan
• When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.

Post the contents of the Panda scan report, along with a new HijackThis Log, the contents of smitfiles.txt and the Ewido Log by using Add Reply.
Let us know if any problems persist.

Please post an updated HijackThis log, along with all the requested logs

[williesbest2]

Since you already appear to have Ewido, Spybot, and Ad-Aware you do not have to install the programs again.

[Rik111]

you'll notice i'm not posting the panda scan info... that's because it wouldn't finish scanning. i even tried leaving it up overnight, but still it stopped scanning at 640,000 files scanned. it found 50 spyware, 9 unwanted tools and 2 unknown. here's the rest of the stuff...

Logfile of HijackThis v1.99.1
Scan saved at 6:37:06 AM, on 5/1/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
C:\WINDOWS\system32\ICROSO~1.NET\wuauboot.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Documents and Settings\Compaq_Owner\Application Data\??stem32\?poolsv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
c:\windows\system\hpsysdrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Compaq_Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...arm1=seconduser
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...arm1=seconduser
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...arm1=seconduser
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...arm1=seconduser
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: Nothing - {edbf1bc8-39ab-48eb-a0a9-c75078eb7c8e} - C:\WINDOWS\system32\hp8D01.tmp (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKLM\..\Run: [WinProfile] sndcfg16.exe
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwsoemon.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\5.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\RunServices: [WinProfile] sndcfg16.exe
O4 - HKCU\..\Run: [Jdsf] C:\Documents and Settings\Compaq_Owner\Application Data\??stem32\?poolsv.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Srro] "C:\WINDOWS\system32\ICROSO~1.NET\wuauboot.exe" -vt yax
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwsoemon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: &Search - http://edits.mywebse...html?p=ZNfox000
O8 - Extra context menu item: Download all by Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download by Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Download selected by Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site by Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winwil32 - winwil32.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe



---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 5:55:32 PM, 4/30/2006
+ Report-Checksum: 275CFE5C

+ Scan result:

:mozilla.13:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.42:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.51:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.54:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.55:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.56:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.57:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.58:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.59:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.60:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.61:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.62:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.63:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.64:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.65:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.66:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.67:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.68:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.69:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.70:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.71:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.73:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.74:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.75:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.76:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.77:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.78:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.79:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.97:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.98:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.99:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.100:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.104:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.122:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.123:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.124:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.131:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.132:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.133:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.134:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.135:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.137:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.138:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.139:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.140:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.141:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.142:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.143:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.144:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.145:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.146:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.147:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.148:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.149:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.150:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.151:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.152:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.153:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.154:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.155:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.156:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.157:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.158:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.159:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.160:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.161:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.162:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.163:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.164:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.165:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.166:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.167:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.168:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.169:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.170:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.171:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.172:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.173:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.174:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.175:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.176:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.177:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.178:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.179:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.180:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.181:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.183:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.187:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.188:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.189:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.198:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.199:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.200:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.202:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.203:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.204:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.205:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.206:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.210:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.211:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.212:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.227:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned with backup
:mozilla.228:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Spylog : Cleaned with backup
:mozilla.229:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Yadro : Cleaned with backup
:mozilla.233:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.234:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.235:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.236:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.237:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.238:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.239:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.240:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.241:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.242:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.243:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.244:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.246:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.247:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.258:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup
:mozilla.259:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup
:mozilla.260:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.261:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.262:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.263:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.264:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.265:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.266:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.267:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.268:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.269:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.270:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.271:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.272:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.273:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.274:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.275:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.276:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.277:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.278:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.279:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.280:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.281:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.282:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.309:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.311:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Addynamix : Cleaned with backup
:mozilla.312:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.313:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.314:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.315:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.316:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.317:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.357:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.361:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.362:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.373:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Clickbank : Cleaned with backup
:mozilla.384:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.424:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.425:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.426:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.427:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.428:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.429:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.430:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.431:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.433:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.554:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Ivwbox : Cleaned with backup
:mozilla.589:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.629:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Paycounter : Cleaned with backup
:mozilla.630:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.634:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.645:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.646:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.654:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.655:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.656:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.657:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.658:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.669:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.670:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.671:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.672:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.694:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.695:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.712:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Trafic : Cleaned with backup
:mozilla.738:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.739:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.770:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.771:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.772:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.773:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.777:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adition : Cleaned with backup
:mozilla.778:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Adition : Cleaned with backup
:mozilla.783:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned with backup
:mozilla.803:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.806:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.807:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.808:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.809:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.810:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.818:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.819:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.865:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Cqcounter : Cleaned with backup
:mozilla.882:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup
:mozilla.890:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.930:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned with backup
:mozilla.931:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned with backup
:mozilla.932:C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\vyu00gj2.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned with backup
C:\Documents and Settings\Compaq_Owner\Cookies\[email protected][1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned with backup
C:\Documents and Settings\Compaq_Owner\Cookies\[email protected][1].txt -> TrackingCookie.Falkag : Cleaned with backup
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned with backup
C:\Documents and Settings\Compaq_Owner\Cookies\[email protected][1].txt -> TrackingCookie.Ru4 : Cleaned with backup
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revenue[1].txt -> TrackingCookie.Revenue : Cleaned with backup
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned with backup
C:\WINDOWS\YAXUninst.exe -> Adware.MediaTickets : Cleaned with backup


::Report End




smitRem © log file
version 2.8

by noahdfear


Microsoft Windows XP [Version 5.1.2600]
The current date is: Sun 04/30/2006
The current time is: 13:14:38.17

Running from
C:\Documents and Settings\Compaq_Owner\Desktop\smitRem

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Pre-run SharedTask Export

(GetSTS.exe) SharedTaskScheduler exporter by Lawrence Abrams (Grinler)
Copyright© 2006 BleepingComputer.com

Registry Pseudo-Format Mode (Not a valid reg file):

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"
"{EA26CE12-DE64-A1C5-9A4F-FC1A64E6AC2E}"="SivuWare"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"


[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"


[HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{EA26CE12-DE64-A1C5-9A4F-FC1A64E6AC2E}\InProcServer32]
@="C:\WINDOWS\system32\sivudro.dll"


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

checking for ShudderLTD key

ShudderLTD key not present!

checking for PSGuard.com key


PSGuard.com key not present!


checking for WinHound.com key


WinHound.com key not present!

spyaxe uninstaller NOT present
Winhound uninstaller NOT present
SpywareStrike uninstaller NOT present

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Existing Pre-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~

Online Security Guide.url
Security Troubleshooting.url


~~~ Favorites ~~~

Antivirus Test Online.url


~~~ system32 folder ~~~

1024 dir
ld****.tmp
ncompat.tlb
hp***.tmp
logfiles


~~~ Icons in System32 ~~~

ot.ico


~~~ Windows directory ~~~



~~~ Drive root ~~~


~~~ Miscellaneous Files/folders ~~~




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright© 2002-2003 [email protected]
Killing PID 904 'explorer.exe'

Starting registry repairs

Registry repairs complete

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

SharedTask Export after registry fix

(GetSTS.exe) SharedTaskScheduler exporter by Lawrence Abrams (Grinler)
Copyright© 2006 BleepingComputer.com

Registry Pseudo-Format Mode (Not a valid reg file):

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"
"{EA26CE12-DE64-A1C5-9A4F-FC1A64E6AC2E}"="SivuWare"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"


[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
@="%SystemRoot%\system32\browseui.dll"


[HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{EA26CE12-DE64-A1C5-9A4F-FC1A64E6AC2E}\InProcServer32]
@="C:\WINDOWS\system32\sivudro.dll"


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Deleting files

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Remaining Post-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~


~~~ Miscellaneous Files/folders ~~~


~~~ Wininet.dll ~~~

CLEAN!


my computer is being very slow and i'm getting popups more than ever now...
Rik

[williesbest2]

Hi Rik111. If you have any problems with the following, please let me know.

1. Fix with HijackThis
Please re-open HijackThis and put checkmarks next to the following entries:

R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)

O2 - BHO: Nothing - {edbf1bc8-39ab-48eb-a0a9-c75078eb7c8e} - C:\WINDOWS\system32\hp8D01.tmp (file missing)

O4 - HKLM\..\Run: [WinProfile] sndcfg16.exe
O4 - HKLM\..\RunServices: [WinProfile] sndcfg16.exe
O4 - HKCU\..\Run: [Jdsf] C:\Documents and Settings\Compaq_Owner\Application Data\??stem32\?poolsv.exe
O4 - HKCU\..\Run: [Srro] "C:\WINDOWS\system32\ICROSO~1.NET\wuauboot.exe" -vt yax

O20 - Winlogon Notify: winwil32 - winwil32.dll (file missing)

now close all other windows other than HijackThis and click Fix Checked. Now close HijackThis.

2. Boot into safe mode

• Restart your computer.
• When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
• Select the option for Safe Mode using the arrow keys.
• Then press enter on your keyboard to boot into Safe Mode.

3. Search for and delete file
Please right click on "Start" and select "Search". Click "All files and folders". Type in sndcfg16.exe. Click the third down arrow for more advanced options and put checkmarks next to search in hidden files. When you find that file right click and select "Delete"

Please right click on "Start" and select "Search". Click "All files and folders". Type in winwil32.dll. Click the third down arrow for more advanced options and put checkmarks next to search in hidden files. When you find that file right click and select "Delete"

Please boot back into normal mode

4. Webroot Spy Sweeper
Please download WebRoot SpySweeper from HERE (It's a 2 week trial):

• Click Download Now to download the program.
• Install it. Once the program is installed, it will open.
• It will prompt you to update to the latest definitions, click Yes.
• Once the definitions are installed, click Options on the left side.
• Click the Sweep Options tab.
• Under What to Sweep please put a check next to the following:
  • Sweep Memory
  • Sweep Registry
  • Sweep Cookies
  • Sweep All User Accounts
  • Enable Direct Disk Sweeping
  • Sweep Contents of Compressed Files
  • Sweep for Rootkits
  • Please UNCHECK Do not Sweep System Restore Folder.
• Click Sweep Now on the left side.
• Click the Start button.
• When it's done scanning, click the Next button.
• Make sure everything has a check next to it, then click the Next button.
• It will remove all of the items found.
• Click Session Log in the upper right corner, copy everything in that window.
• Click the Summary tab and click Finish.
• Paste the contents of the session log you copied into your next reply.

Please post an updated HijackThis log, along with all the requested logs, and how your computer is running

[Rik111]

sndcfg16.exe and winwil32.dll were not found in my searches... but here's the sweep log-


********
5:37 AM: | Start of Session, Tuesday, May 02, 2006 |
5:37 AM: Spy Sweeper started
5:37 AM: Sweep initiated using definitions version 669
5:37 AM: Starting Memory Sweep
5:39 AM: Memory Sweep Complete, Elapsed Time: 00:01:57
5:39 AM: Starting Registry Sweep
5:39 AM: Found Adware: purityscan
5:39 AM: HKLM\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/mediaticketsinstaller.ocx\ (2 subtraces) (ID = 137986)
5:39 AM: HKLM\software\microsoft\windows\currentversion\shareddlls\ || c:\windows\downloaded program files\mediaticketsinstaller.ocx (ID = 139077)
5:39 AM: Found Adware: screensavers
5:39 AM: HKLM\software\screensavers.com\ (14 subtraces) (ID = 140569)
5:39 AM: Found Adware: search nugget toolbar
5:39 AM: HKLM\software\microsoft\windows\currentversion\uninstall\sbar\ (2 subtraces) (ID = 141224)
5:39 AM: Found Adware: whenu save
5:39 AM: HKCR\acm.acmfactory\ (5 subtraces) (ID = 773927)
5:39 AM: HKCR\acm.acmfactory.1\ (3 subtraces) (ID = 773933)
5:39 AM: HKCR\clsid\{a9aae1ab-9688-42c5-86f5-c12f6b9015ad}\ (12 subtraces) (ID = 773937)
5:39 AM: HKCR\typelib\{df901432-1b9f-4f5b-9e56-301c553f9095}\ (9 subtraces) (ID = 773950)
5:39 AM: HKCR\appid\acm.dll\ (1 subtraces) (ID = 773960)
5:39 AM: HKCR\appid\{127df9b4-d75d-44a6-af78-8c3a8ceb03db}\ (1 subtraces) (ID = 773962)
5:39 AM: HKLM\software\classes\acm.acmfactory\ (5 subtraces) (ID = 773964)
5:39 AM: HKLM\software\classes\acm.acmfactory.1\ (3 subtraces) (ID = 773970)
5:39 AM: HKLM\software\classes\appid\acm.dll\ (1 subtraces) (ID = 773974)
5:39 AM: HKLM\software\classes\appid\{127df9b4-d75d-44a6-af78-8c3a8ceb03db}\ (1 subtraces) (ID = 773976)
5:39 AM: HKLM\software\classes\clsid\{a9aae1ab-9688-42c5-86f5-c12f6b9015ad}\ (12 subtraces) (ID = 773979)
5:39 AM: HKLM\software\classes\typelib\{df901432-1b9f-4f5b-9e56-301c553f9095}\ (9 subtraces) (ID = 773992)
5:39 AM: Found Trojan Horse: trojan agent winlogonhook
5:39 AM: HKLM\software\microsoft\mssmgr\ (13 subtraces) (ID = 937101)
5:39 AM: Found Adware: spyware quake fakealert
5:39 AM: HKLM\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler\ || {ea26ce12-de64-a1c5-9a4f-fc1a64e6ac2e} (ID = 1327354)
5:39 AM: Registry Sweep Complete, Elapsed Time:00:00:11
5:39 AM: Starting Cookie Sweep
5:39 AM: Found Spy Cookie: websponsors cookie
5:39 AM: [email protected][2].txt (ID = 3665)
5:39 AM: Found Spy Cookie: adecn cookie
5:39 AM: compaq_owner@adecn[1].txt (ID = 2063)
5:39 AM: Found Spy Cookie: adknowledge cookie
5:39 AM: compaq_owner@adknowledge[1].txt (ID = 2072)
5:39 AM: Found Spy Cookie: adlegend cookie
5:39 AM: compaq_owner@adlegend[1].txt (ID = 2074)
5:39 AM: Found Spy Cookie: hbmediapro cookie
5:39 AM: [email protected][2].txt (ID = 2768)
5:39 AM: Found Spy Cookie: cc214142 cookie
5:39 AM: [email protected][1].txt (ID = 2367)
5:39 AM: Found Spy Cookie: ask cookie
5:39 AM: compaq_owner@ask[1].txt (ID = 2245)
5:39 AM: Found Spy Cookie: belnk cookie
5:39 AM: [email protected][2].txt (ID = 2293)
5:39 AM: Found Spy Cookie: azjmp cookie
5:39 AM: compaq_owner@azjmp[2].txt (ID = 2270)
5:39 AM: compaq_owner@belnk[1].txt (ID = 2292)
5:39 AM: Found Spy Cookie: did-it cookie
5:39 AM: compaq_owner@did-it[1].txt (ID = 2523)
5:39 AM: [email protected][1].txt (ID = 2293)
5:39 AM: Found Spy Cookie: exitexchange cookie
5:39 AM: compaq_owner@exitexchange[1].txt (ID = 2633)
5:39 AM: Found Spy Cookie: clickandtrack cookie
5:39 AM: [email protected][1].txt (ID = 2397)
5:39 AM: Found Spy Cookie: screensavers.com cookie
5:39 AM: [email protected][2].txt (ID = 3298)
5:39 AM: Found Spy Cookie: malwarewipe cookie
5:39 AM: compaq_owner@malwarewipe[1].txt (ID = 6467)
5:39 AM: Found Spy Cookie: monstermarketplace cookie
5:39 AM: compaq_owner@monstermarketplace[1].txt (ID = 3006)
5:39 AM: Found Spy Cookie: mywebsearch cookie
5:39 AM: compaq_owner@mywebsearch[2].txt (ID = 3051)
5:39 AM: Found Spy Cookie: partypoker cookie
5:39 AM: compaq_owner@partypoker[1].txt (ID = 3111)
5:39 AM: Found Spy Cookie: passion cookie
5:39 AM: compaq_owner@passion[2].txt (ID = 3113)
5:39 AM: Found Spy Cookie: rn11 cookie
5:39 AM: compaq_owner@rn11[2].txt (ID = 3261)
5:39 AM: Found Spy Cookie: videodome cookie
5:39 AM: compaq_owner@videodome[1].txt (ID = 3638)
5:39 AM: [email protected][2].txt (ID = 3298)
5:39 AM: Found Spy Cookie: adserver cookie
5:39 AM: [email protected][1].txt (ID = 2142)
5:39 AM: Cookie Sweep Complete, Elapsed Time: 00:00:01
5:39 AM: Starting File Sweep
5:43 AM: Found Trojan Horse: komforochka smtp relay
5:43 AM: a0008335.exe (ID = 217682)
5:52 AM: Found Adware: elitebar
5:52 AM: dkw35d1.tmp.tst (ID = 220425)
5:53 AM: a0029611.dll (ID = 198437)
6:05 AM: a0021526.exe (ID = 74759)
6:09 AM: a0029613.dll (ID = 182873)
6:10 AM: a0021524.exe (ID = 233592)
6:10 AM: a0021523.exe (ID = 233591)
6:19 AM: Warning: Unhandled Archive Type
6:27 AM: Warning: Unhandled Archive Type
6:27 AM: Warning: Unhandled Archive Type
6:27 AM: Warning: Unhandled Archive Type
6:29 AM: Warning: Unhandled Archive Type
6:29 AM: Warning: Unhandled Archive Type
6:29 AM: Warning: Unhandled Archive Type
6:35 AM: Warning: Unhandled Archive Type
6:36 AM: File Sweep Complete, Elapsed Time: 00:56:30
6:36 AM: Full Sweep has completed. Elapsed time 00:58:41
6:36 AM: Traces Found: 142
6:43 AM: Removal process initiated
6:43 AM: Quarantining All Traces: elitebar
6:43 AM: Quarantining All Traces: komforochka smtp relay
6:43 AM: Quarantining All Traces: purityscan
6:43 AM: Quarantining All Traces: trojan agent winlogonhook
6:43 AM: Quarantining All Traces: screensavers
6:43 AM: Quarantining All Traces: search nugget toolbar
6:43 AM: Quarantining All Traces: spyware quake fakealert
6:43 AM: Quarantining All Traces: adecn cookie
6:43 AM: Quarantining All Traces: adknowledge cookie
6:43 AM: Quarantining All Traces: adlegend cookie
6:43 AM: Quarantining All Traces: adserver cookie
6:43 AM: Quarantining All Traces: ask cookie
6:43 AM: Quarantining All Traces: azjmp cookie
6:43 AM: Quarantining All Traces: belnk cookie
6:43 AM: Quarantining All Traces: cc214142 cookie
6:43 AM: Quarantining All Traces: clickandtrack cookie
6:43 AM: Quarantining All Traces: did-it cookie
6:43 AM: Quarantining All Traces: exitexchange cookie
6:43 AM: Quarantining All Traces: hbmediapro cookie
6:43 AM: Quarantining All Traces: malwarewipe cookie
6:43 AM: Quarantining All Traces: monstermarketplace cookie
6:43 AM: Quarantining All Traces: mywebsearch cookie
6:43 AM: Quarantining All Traces: partypoker cookie
6:43 AM: Quarantining All Traces: passion cookie
6:43 AM: Quarantining All Traces: rn11 cookie
6:43 AM: Quarantining All Traces: screensavers.com cookie
6:43 AM: Quarantining All Traces: videodome cookie
6:43 AM: Quarantining All Traces: websponsors cookie
6:43 AM: Quarantining All Traces: whenu save
6:43 AM: Removal process completed. Elapsed time 00:00:30
********
5:35 AM: | Start of Session, Tuesday, May 02, 2006 |
5:35 AM: Spy Sweeper started
5:36 AM: Your spyware definitions have been updated.
5:37 AM: | End of Session, Tuesday, May 02, 2006 |

i hope we make it ^^
Rik

[williesbest2]

Please post an updated HijackThis log and how your computer is running.

[Rik111]

well i'm back up to speed... but i'm getting this RUNDLL error message on reboot

Error loading C:\PROGRA~1\MYWEBS~1\bar\5.bin\MWSBAR.DLL

The specified module could not be found.


here's my HJT...


Logfile of HijackThis v1.99.1
Scan saved at 6:30:55 PM, on 5/2/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Compaq_Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...arm1=seconduser
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...arm1=seconduser
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...arm1=seconduser
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...arm1=seconduser
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwsoemon.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\5.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwsoemon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: &Search - http://edits.mywebse...html?p=ZNfox000
O8 - Extra context menu item: Download all by Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download by Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Download selected by Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site by Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe



and also... i have alot of antispyware programs on my computer... spysweeper, spybot, adaware, AVG, and ewido... should i get rid of any of these or should i just leave them? thanks again!
Rik
PS- while i'm getting computer help... my picture preview isn't working... the windows picture and fax manager stopped working a while back. i remember i had a half-downloaded movie and i couldnt delete it. some1 told me to run cmd and stop some kind of preview via that... any ideas? (if this is the wrong place to ask that just post a link sayin where i should post this problem)