[lenore2]

This popped up on AVG when I logged in this morning. Here's my Hijack this...


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:15:16, on 06/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\CConnect\CConnect.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\OPLIMIT\ocrawr32.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\Grisoft\AVG7\avgvv.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wwe.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft....k/?linkid=54834
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OCRAWARE.lnk = C:\OPLIMIT\OCRAWARE.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: CorrectConnect.lnk = C:\Program Files\CConnect\CConnect.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebo...toUploader3.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebo...otoUploader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.m...ash/swflash.cab
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 7145 bytes

Edited by lenore2, 08 February 2008 - 11:55 AM.

[Advertisements]

lenore2,

Hello, and welcome back to Geeks to Go. I don't see anything obvious in your log, so it's possible AVG took care of it, but just to be on the safe side, let's take a closer look.

Please download Deckard's System Scanner (DSS) and save it to your Desktop.

• Close all other windows before proceeding.
• Double-click on dss.exe and follow the prompts.
• When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

Please download ATF Cleaner by Atribune.
This program is for XP and Windows 2000 onlyDouble-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.

Please go HERE to run Panda's ActiveScan - you must use Internet Explorer for this to work.

• Once you are on the Panda site click the Scan your PC button
• A new window will open...click the Check Now button
• Enter your Country
• Enter your State/Province
• Enter your e-mail address and click send
• If it wants to install an ActiveX component allow it
• Select either Home User or Company
• Click the big Scan Now button
• It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
• When download is complete, click on My Computer to start the scan
• When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report.

Please post the DSS report and the Activescan report in your reply.

sari

[sari]

lenore2,

Hello, and welcome back to Geeks to Go. I don't see anything obvious in your log, so it's possible AVG took care of it, but just to be on the safe side, let's take a closer look.

Please download Deckard's System Scanner (DSS) and save it to your Desktop.

• Close all other windows before proceeding.
• Double-click on dss.exe and follow the prompts.
• When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

Please download ATF Cleaner by Atribune.
This program is for XP and Windows 2000 onlyDouble-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.

Please go HERE to run Panda's ActiveScan - you must use Internet Explorer for this to work.

• Once you are on the Panda site click the Scan your PC button
• A new window will open...click the Check Now button
• Enter your Country
• Enter your State/Province
• Enter your e-mail address and click send
• If it wants to install an ActiveX component allow it
• Select either Home User or Company
• Click the big Scan Now button
• It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
• When download is complete, click on My Computer to start the scan
• When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report.

Please post the DSS report and the Activescan report in your reply.

sari

[lenore2]

Hi there Sari,

I'm now running the Panda scan. Before I forget and sorry to be a pain. A few days back I also had AVG identify a virus on my pc called Exploit. Another user said I should mention it in this thread when I got a response. All the sites look different since doing the ATF cleaner, all the backgrounds have disappeared? it's white screen, none of the actual background. Is that normal or part of the virus?

[sari]

lenore,

Are the screens white in Firefox? It's a little thing that happens with ATF and Firefox sometimes - do this in Firefox: Go to tools > options > privacy. Put a checkmark next to "Clear private data when I close Firefox", and click on Settings. Make sure Passwords is not checked, and everything else is checked and then click on OK. Close Firefox and reopen it, and see if it fixes it.

sari

[lenore2]

Thanks Sari, yeah it was just in firefox. Have resolved that issue now thankyou. Here's the logs..I dunno if the exploit virus will show up in this list as well?

Here's Deckards for whatever reason it never seems to give me two logs, I have no idea why.

Deckard's System Scanner v20071014.68
Run by Becka on 2008-02-11 17:54:16
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Total Physical Memory: 510 MiB (512 MiB recommended).


-- HijackThis (run as Becka.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:54:27, on 11/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\CConnect\CConnect.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\OPLIMIT\ocrawr32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Documents and Settings\Becka\Desktop\Virus fixers\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Becka.exe
C:\PROGRA~1\Grisoft\AVG7\avginet.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wwe.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft....k/?linkid=54834
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OCRAWARE.lnk = C:\OPLIMIT\OCRAWARE.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: CorrectConnect.lnk = C:\Program Files\CConnect\CConnect.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebo...toUploader3.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebo...otoUploader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.m...ash/swflash.cab
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 7145 bytes

-- Files created between 2008-01-11 and 2008-02-11 -----



and here's activescan-


Incident Status Location

Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[server.iad.liveperson.net/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[server.iad.liveperson.net/hc/7715184]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[server.iad.liveperson.net/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.adtech.de/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Bridgetrack Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[citi.bridgetrack.com/]
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.go.com/]
Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.bluestreak.com/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.ads.pointroll.com/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.atwola.com/]
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.zedo.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.zedo.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.burstnet.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/Adviva Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.adviva.net/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/NewMedia Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.anm.co.uk/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[server.iad.liveperson.net/hc/741831]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.overture.com/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.com.com/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[as1.falkag.de/]
Spyware:Cookie/Linksynergy Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.linksynergy.com/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.realmedia.com/]
Spyware:Cookie/Adserver Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.adserver.easyad.info/]
Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[www.burstbeacon.com/]
Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.trafficmp.com/]
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.bravenet.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Becka\Cookies\becka@doubleclick[1].txt
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/FortuneCity Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.fortunecity.com/]
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.adtech.de/]
Spyware:Cookie/Adviva Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.adviva.net/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.bluestreak.com/]
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.zedo.com/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.overture.com/]
Spyware:Cookie/Mysearch Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.mysearch.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.revenue.net/]
Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[searchportal.information.com/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[server.iad.liveperson.net/]
Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.gostats.com/]
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.bravenet.com/]
Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.phg.hitbox.com/]
Spyware:Cookie/onestat.com Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[stat.onestat.com/]
Spyware:Cookie/NewMedia Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.anm.co.uk/]
Spyware:Cookie/Hitslink Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[counter.hitslink.com/]
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.xiti.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.adtech.de/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Dom\Cookies\dom@adrevolver[1].txt
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Dom\Cookies\dom@advertising[1].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Dom\Cookies\dom@doubleclick[1].txt
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Dom\Cookies\[email protected][3].txt
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Dom\Cookies\dom@mediaplex[1].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.adtech.de/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.overture.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.burstnet.com/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.ads.pointroll.com/]
Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.revenue.net/]
Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[searchportal.information.com/]
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.go.com/]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.target.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[.adtech.de/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/YieldManager

[sari]

Lenore,

Could you check that both of those logs are complete? They both look like they got cut off - there should be a lot more information in the DSS, and usually the Activescan says finished at the end.

sari

[lenore2]

I dunno if DSS is working right, I only ever seem to get one report and not the two?

I'll go check the active scan and Dss one again. BRB!

[lenore2]

Here's Deckards again-

Deckard's System Scanner v20071014.68
Run by Becka on 2008-02-11 21:36:40
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Total Physical Memory: 510 MiB (512 MiB recommended).


-- HijackThis (run as Becka.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:36:53, on 11/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\CConnect\CConnect.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\OPLIMIT\ocrawr32.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Documents and Settings\Becka\Desktop\Virus fixers\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Becka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wwe.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft....k/?linkid=54834
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OCRAWARE.lnk = C:\OPLIMIT\OCRAWARE.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: CorrectConnect.lnk = C:\Program Files\CConnect\CConnect.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebo...toUploader3.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebo...otoUploader.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.m...ash/swflash.cab
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 7192 bytes

-- Files created between 2008-01-11 and 2008-02-11 -----------------------------

2008-02-11 18:34:29 44928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS <Not Verified; Panda Software; Panda® Antivirus>
2008-02-11 18:10:50 0 d-------- C:\WINDOWS\system32\ActiveScan
2008-02-11 18:10:47 0 d-------- C:\WINDOWS\LastGood
2008-02-06 11:09:35 0 d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-01-29 22:39:25 4380704 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat


-- Find3M Report ---------------------------------------------------------------

2008-02-11 19:14:35 0 d-------- C:\Program Files\QuickTime
2008-02-11 19:13:13 0 d-------- C:\Program Files\MSN Messenger
2008-02-11 19:11:46 0 d-------- C:\Program Files\Messenger
2008-02-11 19:05:45 0 d-------- C:\Program Files\iTunes
2008-02-11 19:02:26 0 d-------- C:\Program Files\CConnect
2008-02-11 15:25:59 0 d-------- C:\Program Files\Soulseek
2008-02-06 11:09:37 0 d-------- C:\Program Files\Apple Software Update
2008-01-29 22:37:19 4212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-01-02 21:51:37 0 d-------- C:\Program Files\ZoneAlarmSB
2008-01-01 23:21:11 0 d-------- C:\Program Files\Corel
2008-01-01 23:21:11 0 d-------- C:\Program Files\Common Files
2007-12-18 17:40:14 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-12-18 17:40:14 0 d-------- C:\Program Files\Graboid
2007-12-18 17:38:23 0 d-------- C:\Documents and Settings\Becka\Application Data\vlc
2007-12-17 18:38:58 0 d-------- C:\Documents and Settings\Becka\Application Data\Grisoft
2007-12-17 08:56:12 0 d-------- C:\Program Files\Trend Micro
2007-12-12 06:37:04 0 d-------- C:\Documents and Settings\Becka\Application Data\Adobe


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA}]
02/01/2008 21:51 262144 --a------ C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}"= C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL [02/01/2008 21:51 262144]

[-HKEY_CLASSES_ROOT\CLSID\{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" []
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [20/09/2005 08:35]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [20/09/2005 08:32]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [20/09/2005 08:36]
"DVDLauncher"="C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" [12/10/2004 15:54]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [22/12/2007 12:44]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [25/10/2006 18:58]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [30/10/2006 09:36]
"REGSHAVE"="C:\Program Files\REGSHAVE\REGSHAVE.exe" [04/02/2002 22:32]
"AAWTray"="C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe" []
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [11/05/2007 02:06]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [25/09/2007 00:11]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [11/06/2007 09:25]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [14/11/2007 16:05]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [19/01/2007 11:54]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [12/08/2004 13:56]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [13/10/2004 16:24]

C:\Documents and Settings\Becka\Start Menu\Programs\Startup\
OCRAWARE.lnk - C:\OPLIMIT\OCRAWARE.EXE [05/10/2006 17:00:43]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

*Newly Created Service* - PHGKUHRJOHNA
*Newly Created Service* - RKPAVPROC
*Newly Created Service* - SDTHOOK



-- End of Deckard's System Scanner: finished at 2008-02-11 21:37:37 ------------

[lenore2]

Thought I'd do activescan incase the message box was cutting it off..
Incident Status Location

Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[server.iad.liveperson.net/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[server.iad.liveperson.net/hc/7715184]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[server.iad.liveperson.net/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.adtech.de/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Bridgetrack Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[citi.bridgetrack.com/]
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.go.com/]
Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.bluestreak.com/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.ads.pointroll.com/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.atwola.com/]
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.zedo.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.zedo.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.burstnet.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/Adviva Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.adviva.net/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/NewMedia Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.anm.co.uk/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[server.iad.liveperson.net/hc/741831]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.overture.com/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.com.com/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[as1.falkag.de/]
Spyware:Cookie/Linksynergy Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.linksynergy.com/]
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.realmedia.com/]
Spyware:Cookie/Adserver Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.adserver.easyad.info/]
Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[www.burstbeacon.com/]
Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.trafficmp.com/]
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\Becka\Application Data\Mozilla\Firefox\Profiles\fm04fbal.default\cookies.txt[.bravenet.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Becka\Cookies\becka@doubleclick[1].txt
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/FortuneCity Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.fortunecity.com/]
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.adtech.de/]
Spyware:Cookie/Adviva Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.adviva.net/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.bluestreak.com/]
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.zedo.com/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.overture.com/]
Spyware:Cookie/Mysearch Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.mysearch.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.revenue.net/]
Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[searchportal.information.com/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[server.iad.liveperson.net/]
Spyware:Cookie/GoStats Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.gostats.com/]
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.bravenet.com/]
Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.phg.hitbox.com/]
Spyware:Cookie/onestat.com Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[stat.onestat.com/]
Spyware:Cookie/NewMedia Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.anm.co.uk/]
Spyware:Cookie/Hitslink Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[counter.hitslink.com/]
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Dad\Application Data\Mozilla\Firefox\Profiles\acjieg8y.default\cookies.txt[.xiti.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Dom\Application Data\Mozilla\Firefox\Profiles\hv5lkeo9.default\cookies.txt[.adtech.de/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Dom\Cookies\dom@adrevolver[1].txt
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Dom\Cookies\dom@advertising[1].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Dom\Cookies\dom@doubleclick[1].txt
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Dom\Cookies\[email protected][3].txt
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Dom\Cookies\dom@mediaplex[1].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.adtech.de/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.overture.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.burstnet.com/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.ads.pointroll.com/]
Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.revenue.net/]
Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[searchportal.information.com/]
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.go.com/]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Kaya\Application Data\Mozilla\Firefox\Profiles\4v0g0ppr.default\cookies.txt[.target.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[.adtech.de/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Mum\Application Data\Mozilla\Firefox\Profiles\50r85ey5.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Ollie\Application Data\Mozilla\Firefox\Profiles\cf36hql4.default\cookies.txt[.statcounter.com/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Ollie\Application Data\Mozilla\Firefox\Profiles\cf36hql4.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Ollie\Application Data\Mozilla\Firefox\Profiles\cf36hql4.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Ollie\Application Data\Mozilla\Firefox\Profiles\cf36hql4.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Ollie\Application Data\Mozilla\Firefox\Profiles\cf36hql4.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Ollie\Application Data\Mozilla\Firefox\Profiles\cf36hql4.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Ollie\Application Data\Mozilla\Firefox\Profiles\cf36hql4.default\cookies.txt[.apmebf.com/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Ollie\Application Data\Mozilla\Firefox\Profiles\cf36hql4.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Ollie\Application Data\Mozilla\Firefox\Profiles\cf36hql4.default\cookies.txt[.overture.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Ollie\Application Data\Mozilla\Firefox\Profiles\cf36hql4.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Ollie\Application Data\Mozilla\Firefox\Profiles\cf36hql4.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.adrevolver.com/]
Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.tradedoubler.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.bs.serving-sys.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.casalemedia.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.adtech.de/]
Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.azjmp.com/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.ads.pointroll.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Vick\Application Data\Mozilla\Firefox\Profiles\jc3pwqs5.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/FastClick Not disinfected

[sari]

lenore,

I'm really not seeing anything - I think what happened is that your antivirus program did its job, caught a file, and put it in quarantine. If you're not seeing any other symptoms, and it doesn't keep popping up, you're probably safe. However, I can leave this thread open, and if you think you still have an issue, or something develops, over the next week, you can post back in here and we'll go from there.

sari

[lenore2]

Wow that would be a first for my machine! excellent. So the Exploit is nothing to worry about either?

Thanks for your help.

[sari]

Lenore,

If an antivirus is doing it's job, it may identify a virus and quarantine or clean it, and just notify you that it's done so. Mine has done that, due to attachments on emails I've received, etc. If it keeps finding the same things over and over, or you start experiencing popups, slowness, etc., then you may be infected. It sounds like in this case your AV did its job and stopped something from infecting you.