Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Win32:TratBHO [Trj] [RESOLVED]


  • This topic is locked This topic is locked

#31
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
It's only 8pm here so our time zones must be similar enough :)

I'd let the scan continue to be safe, you will have to attach the report though


will be ok to just go about my normal computer business?

Yes it is perfectly safe, we are just cleaning some remains. We should be finished after the scan.
  • 0

Advertisements


#32
checkyoulater

checkyoulater

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
actually here in the Philippines its 4AM :) i sleep late...well early in the morning anyway

which is convenient since most of the people i look to for help are in other countries where my night is their day or early night.....also has to do with my line of business :)

nice to know it's still quite early where you're at and i can only hope this scanning ends soon so i can breath a bit easier :)

UPDATE: 5 hours and 40mins.....293 thousand files scanned ....and still running :)

Edited by checkyoulater, 11 February 2008 - 04:04 PM.

  • 0

#33
checkyoulater

checkyoulater

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
it's now 6AM and i've got other stuff i need to attend to i guess i'll be posting results later this evening, that would be tom to you....

it's still scanning i'm at 313 thousand files now running for 6 hours and 11 mins.

i'm so tempted to kill the scan but i don't ever want to have to go through the entire 6hour plus wait again...oh well, i hope it is in fact clean after this :)

i don't have a super computer i hardly have that much HDD .... 2x 80gb sata drives that's it, i can't believe it's taking this long to scan

i've never used a scan software that took this long, and i'm really wondering why i keep seeing the same files being scanned over and over, it's like the scan has gone into a loop? i swear i've read/seen it scan my desktop files at least 10x already

Edited by checkyoulater, 11 February 2008 - 04:44 PM.

  • 0

#34
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
It seems somebody had the same problem, go ahead and cancel the scan

Post a new HijackThis log and tell me how your PC is running

Edited by Rorschach112, 11 February 2008 - 06:09 PM.

  • 0

#35
checkyoulater

checkyoulater

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
ok here's what happened....

i clicked next in the superantispyware and what usually comes out, was there, so i hit ok, then next to clean the files...

so right now i shall be posting these logs in this order:

1. combofix (the last time i ran this was before superantispyware
2. superantispyware log (the one that looped around like [bleep] < although it looks like the scan log doesn't end the way the it did on the laptop
3. new hijackthis log from this morning

here goes.....

ComboFix 08-02.05.3 - benito 2008-02-12 0:07:28.2 - NTFSx86
Microsoft® Windows Vista™ Business 6.0.6000.0.1252.1.1033.18.545 [GMT 8:00]
Running from: C:\Users\benito\Desktop\ComboFix.exe
Command switches used :: C:\Users\benito\Desktop\CFScript.txt
* Created a new restore point

FILE
G:\RavMon.exe
.

((((((((((((((((((((((((( Files Created from 2008-01-11 to 2008-02-11 )))))))))))))))))))))))))))))))
.

2008-02-11 04:52 . 2008-02-11 04:52 <DIR> d-------- C:\_OTMoveIt
2008-02-11 04:30 . 2008-02-11 04:30 <DIR> d-------- C:\Deckard
2008-02-08 10:56 . 2008-02-09 13:45 <DIR> d-------- C:\VundoFix Backups
2008-02-02 12:10 . 2008-02-02 12:10 <DIR> d-------- C:\Program Files\Trend Micro
2008-02-01 02:38 . 2008-02-01 02:38 <DIR> d-------- C:\Users\benito\AppData\Roaming\Media Player Classic
2008-01-28 22:13 . 2008-01-29 00:03 <DIR> d-------- C:\Users\benito\AppData\Roaming\skypePM
2008-01-28 22:13 . 2008-01-28 22:13 32 --a------ C:\Users\All Users\ezsid.dat
2008-01-28 22:13 . 2008-01-28 22:13 32 --a------ C:\ProgramData\ezsid.dat
2008-01-27 13:35 . 2006-10-26 19:56 32,592 --a------ C:\Windows\System32\msonpmon.dll
2008-01-27 13:32 . 2008-01-27 13:32 <DIR> d-------- C:\Program Files\Microsoft Works
2008-01-27 13:26 . 2008-01-27 13:26 <DIR> d-------- C:\Program Files\Microsoft.NET
2008-01-27 13:21 . 2008-01-27 13:21 <DIR> d-------- C:\Program Files\Microsoft Visual Studio 8
2008-01-27 13:17 . 2008-01-28 02:38 <DIR> d-------- C:\Users\All Users\Microsoft Help
2008-01-27 13:17 . 2008-01-28 02:38 <DIR> d-------- C:\ProgramData\Microsoft Help
2008-01-27 13:16 . 2008-01-27 13:16 <DIR> dr-h----- C:\MSOCache
2008-01-26 23:12 . 2008-01-26 23:12 <DIR> d-------- C:\Users\All Users\FLEXnet
2008-01-26 23:12 . 2008-01-26 23:12 <DIR> d-------- C:\ProgramData\FLEXnet
2008-01-26 22:53 . 2008-01-26 22:53 <DIR> d-------- C:\Program Files\Common Files\Macrovision Shared
2008-01-26 16:42 . 2007-09-24 23:31 69,632 --a------ C:\Windows\System32\javacpl.cpl
2008-01-26 14:34 . 2008-01-26 14:37 <DIR> d-------- C:\Windows\WinRAR
2008-01-26 11:34 . 2008-01-26 16:42 <DIR> d-------- C:\Program Files\Java
2008-01-26 11:28 . 2008-01-26 11:28 <DIR> d-------- C:\Program Files\Common Files\Java
2008-01-25 00:51 . 2008-01-25 00:51 <DIR> d-------- C:\Users\benito\AppData\Roaming\Leadertech
2008-01-24 16:23 . 2008-01-24 16:23 <DIR> d-------- C:\Program Files\WinSCP
2008-01-23 16:30 . 2008-01-23 16:30 <DIR> d-------- C:\Program Files\Red Kawa
2008-01-23 16:30 . 2008-01-23 16:30 <DIR> d-------- C:\Program Files\AviSynth 2.5
2008-01-22 14:02 . 2008-01-21 22:57 <DIR> d-------- C:\Windows\Debug
2008-01-22 13:55 . 2008-01-22 14:07 <DIR> d-------- C:\Windows\Panther
2008-01-22 12:02 . 2008-01-22 11:53 355 -rahs---- C:\Boot.ini.saved
2008-01-22 11:53 . 2008-01-22 13:55 <DIR> d--hs---- C:\Boot
2008-01-22 11:53 . 2006-11-02 17:53 438,840 -rahs---- C:\bootmgr
2008-01-22 11:53 . 2008-01-22 13:55 8,192 -ra-s---- C:\BOOTSECT.BAK
2008-01-22 11:31 . 2008-01-22 06:23 <DIR> d-------- C:\Windows.old
2008-01-22 06:11 . 2008-01-29 02:27 <DIR> d-------- C:\Users\benito\AppData\Roaming\Skype
2008-01-22 06:11 . 2008-01-22 06:11 <DIR> d-------- C:\Users\All Users\Yahoo!
2008-01-22 06:11 . 2008-01-22 06:40 <DIR> d-------- C:\Users\All Users\NVIDIA
2008-01-22 06:11 . 2008-01-22 06:11 <DIR> d-------- C:\ProgramData\Yahoo!
2008-01-22 06:11 . 2008-01-22 06:40 <DIR> d-------- C:\ProgramData\NVIDIA
2008-01-22 02:29 . 2008-01-22 02:29 229,888 --a------ C:\Windows\System32\msshsq.dll
2008-01-22 02:28 . 2007-09-12 05:28 1,073,152 --a------ C:\Windows\System32\nvcpluir.dll
2008-01-22 02:28 . 2007-09-12 05:28 753,664 --a------ C:\Windows\System32\nvcplui.exe
2008-01-22 02:28 . 2007-09-12 05:28 413,696 --a------ C:\Windows\System32\nvcpl.cpl
2008-01-22 02:28 . 2007-09-12 05:28 307,200 --a------ C:\Windows\System32\nvexpbar.dll
2008-01-22 02:12 . 2008-01-22 02:12 <DIR> d-------- C:\Windows\PCHEALTH
2008-01-22 02:03 . 2008-01-22 02:12 <DIR> d-------- C:\Program Files\Windows Live
2008-01-22 02:03 . 2008-01-22 02:11 <DIR> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
2008-01-22 02:02 . 2008-01-22 02:02 <DIR> d-------- C:\Users\All Users\WLInstaller
2008-01-22 02:02 . 2008-01-22 02:02 <DIR> d-------- C:\ProgramData\WLInstaller
2008-01-22 01:59 . 2008-01-22 01:59 <DIR> d-------- C:\Users\All Users\Skype
2008-01-22 01:59 . 2008-01-22 01:59 <DIR> d-------- C:\ProgramData\Skype
2008-01-22 01:59 . 2008-01-22 01:59 <DIR> d-------- C:\Program Files\Skype
2008-01-22 01:59 . 2008-01-22 01:59 <DIR> d-------- C:\Program Files\Common Files\Skype
2008-01-22 01:47 . 2008-01-22 01:47 <DIR> d-------- C:\Windows\System32\Macromed
2008-01-22 01:44 . 2008-01-22 01:46 <DIR> d-------- C:\Program Files\Yahoo!
2008-01-22 01:33 . 2008-01-22 01:33 <DIR> d-------- C:\Program Files\Handbrake
2008-01-22 01:29 . 2008-02-08 10:57 <DIR> d-------- C:\Users\benito\AppData\Roaming\uTorrent
2008-01-22 01:29 . 2008-01-22 01:29 <DIR> d-------- C:\Program Files\uTorrent
2008-01-22 01:29 . 2008-01-26 23:07 <DIR> d-------- C:\Program Files\Common Files\Adobe
2008-01-22 01:28 . 2008-01-22 01:28 <DIR> d-------- C:\Windows\Downloaded Installations
2008-01-22 01:28 . 2008-01-26 23:08 <DIR> d-------- C:\Users\All Users\Adobe
2008-01-21 23:41 . 2008-01-22 12:54 <DIR> d-------- C:\Users\benito\AppData\Roaming\Apple Computer
2008-01-21 23:41 . 2008-01-21 23:41 <DIR> d-------- C:\Program Files\iTunes
2008-01-21 23:41 . 2008-01-21 23:41 <DIR> d-------- C:\Program Files\iPod
2008-01-21 23:39 . 2008-01-21 23:39 <DIR> d-------- C:\Program Files\Bonjour
2008-01-21 23:38 . 2008-01-21 23:41 <DIR> d-------- C:\Users\All Users\Apple Computer
2008-01-21 23:38 . 2008-01-21 23:41 <DIR> d-------- C:\ProgramData\Apple Computer
2008-01-21 23:38 . 2008-01-21 23:39 <DIR> d-------- C:\Program Files\QuickTime
2008-01-21 23:37 . 2008-01-21 23:37 <DIR> d-------- C:\Program Files\Apple Software Update
2008-01-21 23:36 . 2008-01-21 23:36 <DIR> d-------- C:\Users\All Users\Apple
2008-01-21 23:36 . 2008-01-21 23:36 <DIR> d-------- C:\ProgramData\Apple
2008-01-21 23:36 . 2008-01-21 23:36 <DIR> d-------- C:\Program Files\Common Files\Apple
2008-01-21 23:35 . 2008-01-29 04:31 <DIR> d--hs---- C:\Windows\Installer
2008-01-21 23:19 . 2003-03-19 04:20 1,060,864 --a------ C:\Windows\System32\MFC71.dll
2008-01-21 23:19 . 2007-12-04 21:04 837,496 --a------ C:\Windows\System32\aswBoot.exe
2008-01-21 23:19 . 2003-03-19 03:14 499,712 --a------ C:\Windows\System32\MSVCP71.dll
2008-01-21 23:19 . 2004-01-09 17:13 380,928 --a------ C:\Windows\System32\actskin4.ocx
2008-01-21 23:19 . 2003-02-21 11:42 348,160 --a------ C:\Windows\System32\MSVCR71.dll
2008-01-21 23:19 . 2007-12-04 20:54 95,608 --a------ C:\Windows\System32\AvastSS.scr
2008-01-21 23:19 . 2007-12-04 22:52 45,648 --a------ C:\Windows\System32\drivers\aswMonFlt.sys
2008-01-21 23:19 . 2007-12-04 22:51 42,912 --a------ C:\Windows\System32\drivers\aswTdi.sys
2008-01-21 23:19 . 2007-12-04 22:53 23,152 --a------ C:\Windows\System32\drivers\aswRdr.sys
2008-01-21 23:18 . 2008-01-21 23:18 <DIR> d-------- C:\Program Files\Alwil Software
2008-01-21 23:06 . 2008-01-21 23:06 2,923,520 --a------ C:\Windows\explorer.exe
2008-01-21 23:03 . 2008-01-21 23:03 <DIR> d-------- C:\Program Files\Combined Community Codec Pack
2008-01-21 23:03 . 2008-01-21 23:03 376,320 --a------ C:\Windows\System32\winsrv.dll
2008-01-21 23:03 . 2008-01-21 23:03 49,664 --a------ C:\Windows\System32\csrsrv.dll
2008-01-21 23:01 . 2008-01-21 23:01 802,816 --a------ C:\Windows\System32\drivers\tcpip.sys
2008-01-21 23:01 . 2008-01-21 23:01 216,760 --a------ C:\Windows\System32\drivers\netio.sys
2008-01-21 23:01 . 2008-01-21 23:01 167,424 --a------ C:\Windows\System32\tcpipcfg.dll
2008-01-21 23:01 . 2008-01-21 23:01 24,064 --a------ C:\Windows\System32\netcfg.exe
2008-01-21 23:01 . 2008-01-21 23:01 22,016 --a------ C:\Windows\System32\netiougc.exe
2008-01-21 23:00 . 2008-01-21 23:00 414,208 --a------ C:\Windows\System32\msscp.dll
2008-01-21 22:59 . 2008-01-21 22:59 8,147,968 --a------ C:\Windows\System32\wmploc.DLL
2008-01-21 22:59 . 2008-01-21 22:59 356,864 --a------ C:\Windows\System32\MediaMetadataHandler.dll
2008-01-21 22:59 . 2008-01-21 22:59 7,680 --a------ C:\Windows\System32\spwmp.dll
2008-01-21 22:59 . 2008-01-21 22:59 4,096 --a------ C:\Windows\System32\msdxm.ocx
2008-01-21 22:59 . 2008-01-21 22:59 4,096 --a------ C:\Windows\System32\dxmasf.dll
2008-01-21 22:58 . 2008-01-21 22:58 396,800 --a------ C:\Windows\System32\MPSSVC.dll
2008-01-21 22:58 . 2008-01-21 22:58 392,192 --a------ C:\Windows\System32\FirewallAPI.dll
2008-01-21 22:58 . 2008-01-21 22:58 178,688 --a------ C:\Windows\System32\iphlpsvc.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-27 05:32 --------- d-----w C:\Program Files\MSBuild
2008-01-21 15:16 174 --sha-w C:\Program Files\desktop.ini
2008-01-21 15:11 --------- d-----w C:\Program Files\Windows Mail
2008-01-21 15:11 --------- d-----w C:\Program Files\Windows Defender
2008-01-21 15:11 --------- d-----w C:\Program Files\Windows Calendar
2008-01-21 15:10 --------- d-----w C:\Program Files\Windows Sidebar
2008-01-21 15:07 8,192 ----a-w C:\Windows\System32\riched32.dll
2008-01-21 15:07 77,824 ----a-w C:\Windows\System32\rascfg.dll
2008-01-21 15:07 70,144 ----a-w C:\Windows\system32\drivers\pacer.sys
2008-01-21 15:07 694,784 ----a-w C:\Windows\System32\localspl.dll
2008-01-21 15:07 619,008 ----a-w C:\Windows\system32\drivers\dxgkrnl.sys
2008-01-21 15:07 61,952 ----a-w C:\Windows\system32\drivers\wanarp.sys
2008-01-21 15:07 52,736 ----a-w C:\Windows\System32\rasdiag.dll
2008-01-21 15:07 48,640 ----a-w C:\Windows\system32\drivers\ndproxy.sys
2008-01-21 15:07 384,000 ----a-w C:\Windows\System32\netcfgx.dll
2008-01-21 15:07 36,864 ----a-w C:\Windows\System32\cdd.dll
2008-01-21 15:07 33,280 ----a-w C:\Windows\System32\traffic.dll
2008-01-21 15:07 32,768 ----a-w C:\Windows\System32\rasmxs.dll
2008-01-21 15:07 286,208 ----a-w C:\Windows\System32\ipnathlp.dll
2008-01-21 15:07 22,016 ----a-w C:\Windows\System32\rasser.dll
2008-01-21 15:07 20,480 ----a-w C:\Windows\system32\drivers\ndistapi.sys
2008-01-21 15:07 15,360 ----a-w C:\Windows\System32\pacerprf.dll
2008-01-21 15:07 134,656 ----a-w C:\Windows\System32\dps.dll
2008-01-21 15:07 13,824 ----a-w C:\Windows\System32\wshqos.dll
2008-01-21 15:07 13,824 ----a-w C:\Windows\System32\icsunattend.exe
2008-01-21 15:06 87,040 ----a-w C:\Windows\System32\msoert2.dll
2008-01-21 15:06 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2008-01-21 15:06 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
2008-01-21 15:06 542,720 ----a-w C:\Windows\System32\sysmain.dll
2008-01-21 15:06 502,784 ----a-w C:\Windows\System32\wlansvc.dll
2008-01-21 15:06 47,104 ----a-w C:\Windows\System32\wlanapi.dll
2008-01-21 15:06 39,424 ----a-w C:\Windows\System32\ACCTRES.dll
2008-01-21 15:06 297,984 ----a-w C:\Windows\System32\wlansec.dll
2008-01-21 15:06 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
2008-01-21 15:06 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys
2008-01-21 15:06 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
2008-01-21 15:06 205,824 ----a-w C:\Windows\System32\msoeacct.dll
2008-01-21 15:06 2,027,008 ----a-w C:\Windows\System32\win32k.sys
2008-01-21 14:56 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-01-21 14:56 449,024 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-01-21 14:56 2,143,744 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-01-21 14:56 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-01-21 14:47 88,576 ----a-w C:\Windows\System32\avifil32.dll
2008-01-21 14:47 82,944 ----a-w C:\Windows\System32\mciavi32.dll
2008-01-21 14:47 8,138,240 ----a-w C:\Windows\System32\ssBranded.scr
2008-01-21 14:47 712,192 ----a-w C:\Windows\System32\WindowsCodecs.dll
2008-01-21 14:47 69,632 ----a-w C:\Windows\System32\sendmail.dll
2008-01-21 14:47 65,024 ----a-w C:\Windows\System32\avicap32.dll
2008-01-21 14:47 61,440 ----a-w C:\Windows\System32\ntprint.exe
2008-01-21 14:47 320,000 ----a-w C:\Windows\system32\drivers\csc.sys
2008-01-21 14:47 31,232 ----a-w C:\Windows\System32\msvidc32.dll
2008-01-21 14:47 269,824 ----a-w C:\Windows\System32\schannel.dll
2008-01-21 14:47 220,160 ----a-w C:\Windows\System32\ntprint.dll
2008-01-21 14:47 123,904 ----a-w C:\Windows\System32\msvfw32.dll
2008-01-21 14:47 120,320 ----a-w C:\Windows\System32\dhcpcsvc6.dll
2008-01-21 14:47 12,800 ----a-w C:\Windows\System32\msrle32.dll
2008-01-21 14:47 105,984 ----a-w C:\Windows\System32\CscMig.dll
2008-01-21 14:47 10,240 ----a-w C:\Windows\System32\dhcpcmonitor.dll
2008-01-21 14:47 1,984,512 ----a-w C:\Windows\System32\authui.dll
2008-01-21 14:44 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
2008-01-21 14:44 824,832 ----a-w C:\Windows\System32\wininet.dll
2008-01-21 14:44 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
2008-01-21 14:44 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-01-21 14:44 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-01-21 14:44 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-01-21 14:44 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
2008-01-21 14:44 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2008-01-21 23:02 1006264]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 21:00 79224]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-01-10 15:27 385024]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-01-15 03:22 267048]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-09 11:09 63712]
"SoundMan"="SOUNDMAN.EXE" [2007-03-09 16:28 598016 C:\Windows\SOUNDMAN.EXE]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-09-12 05:28 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-09-12 05:28 8497696]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-09-12 05:28 81920]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47 31016]

R2 aswMonFlt;aswMonFlt;C:\Windows\system32\DRIVERS\aswMonFlt.sys [2007-12-04 22:52]
R3 RTL8169;Realtek 8169 NT Driver;C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 15:30]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc

.
Contents of the 'Scheduled Tasks' folder
"2008-02-11 05:55:12 C:\Windows\Tasks\User_Feed_Synchronization-{C3B6750F-69EC-4A83-ACAA-6641E8AD71D1}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-12 00:10:34
Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-02-12 0:11:31
ComboFix-quarantined-files.txt 2008-02-11 16:11:25
ComboFix2.txt 2008-02-11 05:19:00
.
2008-02-08 06:51:00 --- E O F ---



next.... in the ff post it won't all fit in this post

Edited by checkyoulater, 11 February 2008 - 10:17 PM.

  • 0

#36
checkyoulater

checkyoulater

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
superantispyware....


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 02/12/2008 at 11:27 AM

Application Version : 3.9.1008

Core Rules Database Version : 3399
Trace Rules Database Version: 1391

Scan type : Complete Scan
Total Scan Time : 11:03:53

Memory items scanned : 499
Memory threats detected : 0
Registry items scanned : 6939
Registry threats detected : 0
File items scanned : 599742
File threats detected : 886

Adware.Tracking Cookie
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\benito@2o7[1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\benito@adinterax[2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\benito@2o7[1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\benito@adinterax[2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@adbrite[2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@adrevolver[1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@advertising[2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@apmebf[1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@atdmt[2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@bizadverts[2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@clickaider[1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@clicksor[1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@doubleclick[1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@imrworldwide[2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@mediaplex[1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@revenue[2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@revsci[2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@serving-sys[2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@statcounter[1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@statsgod[1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@tradedoubler[2].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@zedo[1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\benito@2o7[1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\benito@adinterax[2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@adbrite[2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@adrevolver[1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@advertising[2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@apmebf[1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@atdmt[2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@bizadverts[2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@clickaider[1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@clicksor[1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@doubleclick[1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@imrworldwide[2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@mediaplex[1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@revenue[2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@revsci[2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@serving-sys[2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@statcounter[1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@statsgod[1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@tradedoubler[2].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@zedo[1].txt
C:\Documents and Settings\benito\Cookies\benito@2o7[1].txt
C:\Documents and Settings\benito\Cookies\benito@adinterax[2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\benito@adbrite[2].txt
C:\Documents and Settings\benito\Cookies\Low\benito@adrevolver[1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\benito@advertising[2].txt
C:\Documents and Settings\benito\Cookies\Low\benito@apmebf[1].txt
C:\Documents and Settings\benito\Cookies\Low\benito@atdmt[2].txt
C:\Documents and Settings\benito\Cookies\Low\benito@bizadverts[2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\benito@clickaider[1].txt
C:\Documents and Settings\benito\Cookies\Low\benito@clicksor[1].txt
C:\Documents and Settings\benito\Cookies\Low\benito@doubleclick[1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][10].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][11].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][4].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][5].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][6].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][7].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][8].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][9].txt

to be continued in FF post

Edited by checkyoulater, 11 February 2008 - 10:19 PM.

  • 0

#37
checkyoulater

checkyoulater

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
C:\Documents and Settings\benito\Cookies\Low\[email protected][9].txt
C:\Documents and Settings\benito\Cookies\Low\benito@imrworldwide[2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][3].txt
C:\Documents and Settings\benito\Cookies\Low\benito@mediaplex[1].txt
C:\Documents and Settings\benito\Cookies\Low\benito@revenue[2].txt
C:\Documents and Settings\benito\Cookies\Low\benito@revsci[2].txt
C:\Documents and Settings\benito\Cookies\Low\benito@serving-sys[2].txt
C:\Documents and Settings\benito\Cookies\Low\benito@statcounter[1].txt
C:\Documents and Settings\benito\Cookies\Low\benito@statsgod[1].txt
C:\Documents and Settings\benito\Cookies\Low\benito@tradedoubler[2].txt
C:\Documents and Settings\benito\Cookies\Low\[email protected][1].txt
C:\Documents and Settings\benito\Cookies\Low\benito@zedo[1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@adbrite[2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@adrevolver[1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@advertising[2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@apmebf[1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@atdmt[2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@bizadverts[2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@clickaider[1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@clicksor[1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@doubleclick[1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@imrworldwide[2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@mediaplex[1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@revenue[2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@revsci[2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@serving-sys[2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@statcounter[1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@statsgod[1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@tradedoubler[2].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\AppData\Roaming\Microsoft\Windows\Cookies\Low\benito@zedo[1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\benito@2o7[1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\benito@adinterax[2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@adbrite[2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@adrevolver[1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@advertising[2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@apmebf[1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@atdmt[2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@bizadverts[2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@clickaider[1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@clicksor[1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@doubleclick[1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][10].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][11].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][4].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][5].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][6].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][7].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][8].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][9].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@imrworldwide[2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][3].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@mediaplex[1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@revenue[2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@revsci[2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@serving-sys[2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@statcounter[1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@statsgod[1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@tradedoubler[2].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\[email protected][1].txt
C:\Users\benito\Application Data\Microsoft\Windows\Cookies\Low\benito@zedo[1].txt
C:\Users\benito\Cookies\benito@2o7[1].txt
C:\Users\benito\Cookies\benito@adinterax[2].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\benito@adbrite[2].txt
C:\Users\benito\Cookies\Low\benito@adrevolver[1].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\benito@advertising[2].txt
C:\Users\benito\Cookies\Low\benito@apmebf[1].txt
C:\Users\benito\Cookies\Low\benito@atdmt[2].txt
C:\Users\benito\Cookies\Low\benito@bizadverts[2].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\benito@clickaider[1].txt
C:\Users\benito\Cookies\Low\benito@clicksor[1].txt
C:\Users\benito\Cookies\Low\benito@doubleclick[1].txt
C:\Users\benito\Cookies\Low\[email protected][10].txt
C:\Users\benito\Cookies\Low\[email protected][11].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\[email protected][3].txt
C:\Users\benito\Cookies\Low\[email protected][4].txt
C:\Users\benito\Cookies\Low\[email protected][5].txt
C:\Users\benito\Cookies\Low\[email protected][6].txt
C:\Users\benito\Cookies\Low\[email protected][7].txt
C:\Users\benito\Cookies\Low\[email protected][8].txt
C:\Users\benito\Cookies\Low\[email protected][9].txt
C:\Users\benito\Cookies\Low\[email protected][10].txt
C:\Users\benito\Cookies\Low\[email protected][11].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\[email protected][3].txt
C:\Users\benito\Cookies\Low\[email protected][4].txt
C:\Users\benito\Cookies\Low\[email protected][5].txt
C:\Users\benito\Cookies\Low\[email protected][6].txt
C:\Users\benito\Cookies\Low\[email protected][7].txt
C:\Users\benito\Cookies\Low\[email protected][8].txt
C:\Users\benito\Cookies\Low\[email protected][10].txt
C:\Users\benito\Cookies\Low\[email protected][11].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\[email protected][3].txt
C:\Users\benito\Cookies\Low\[email protected][4].txt
C:\Users\benito\Cookies\Low\[email protected][5].txt
C:\Users\benito\Cookies\Low\[email protected][6].txt
C:\Users\benito\Cookies\Low\[email protected][7].txt
C:\Users\benito\Cookies\Low\[email protected][8].txt
C:\Users\benito\Cookies\Low\[email protected][9].txt
C:\Users\benito\Cookies\Low\[email protected][10].txt
C:\Users\benito\Cookies\Low\[email protected][11].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\[email protected][3].txt
C:\Users\benito\Cookies\Low\[email protected][4].txt
C:\Users\benito\Cookies\Low\[email protected][5].txt
C:\Users\benito\Cookies\Low\[email protected][6].txt
C:\Users\benito\Cookies\Low\[email protected][7].txt
C:\Users\benito\Cookies\Low\[email protected][8].txt
C:\Users\benito\Cookies\Low\[email protected][10].txt
C:\Users\benito\Cookies\Low\[email protected][11].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\[email protected][3].txt
C:\Users\benito\Cookies\Low\[email protected][4].txt
C:\Users\benito\Cookies\Low\[email protected][5].txt
C:\Users\benito\Cookies\Low\[email protected][6].txt
C:\Users\benito\Cookies\Low\[email protected][7].txt
C:\Users\benito\Cookies\Low\[email protected][8].txt
C:\Users\benito\Cookies\Low\[email protected][9].txt
C:\Users\benito\Cookies\Low\[email protected][10].txt
C:\Users\benito\Cookies\Low\[email protected][11].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\[email protected][3].txt
C:\Users\benito\Cookies\Low\[email protected][4].txt
C:\Users\benito\Cookies\Low\[email protected][5].txt
C:\Users\benito\Cookies\Low\[email protected][6].txt
C:\Users\benito\Cookies\Low\[email protected][7].txt
C:\Users\benito\Cookies\Low\[email protected][8].txt
C:\Users\benito\Cookies\Low\[email protected][9].txt
C:\Users\benito\Cookies\Low\[email protected][10].txt
C:\Users\benito\Cookies\Low\[email protected][11].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\[email protected][3].txt
C:\Users\benito\Cookies\Low\[email protected][4].txt
C:\Users\benito\Cookies\Low\[email protected][5].txt
C:\Users\benito\Cookies\Low\[email protected][6].txt
C:\Users\benito\Cookies\Low\[email protected][7].txt
C:\Users\benito\Cookies\Low\[email protected][8].txt
C:\Users\benito\Cookies\Low\[email protected][9].txt
C:\Users\benito\Cookies\Low\[email protected][10].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\[email protected][3].txt
C:\Users\benito\Cookies\Low\[email protected][4].txt
C:\Users\benito\Cookies\Low\[email protected][5].txt
C:\Users\benito\Cookies\Low\[email protected][6].txt
C:\Users\benito\Cookies\Low\[email protected][7].txt
C:\Users\benito\Cookies\Low\[email protected][8].txt
C:\Users\benito\Cookies\Low\[email protected][9].txt
C:\Users\benito\Cookies\Low\[email protected][10].txt
C:\Users\benito\Cookies\Low\[email protected][11].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\[email protected][3].txt
C:\Users\benito\Cookies\Low\[email protected][4].txt
C:\Users\benito\Cookies\Low\[email protected][5].txt
C:\Users\benito\Cookies\Low\[email protected][6].txt
C:\Users\benito\Cookies\Low\[email protected][7].txt
C:\Users\benito\Cookies\Low\[email protected][8].txt
C:\Users\benito\Cookies\Low\[email protected][9].txt
C:\Users\benito\Cookies\Low\[email protected][10].txt
C:\Users\benito\Cookies\Low\[email protected][11].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][2].txt
C:\Users\benito\Cookies\Low\[email protected][3].txt
C:\Users\benito\Cookies\Low\[email protected][4].txt
C:\Users\benito\Cookies\Low\[email protected][5].txt
C:\Users\benito\Cookies\Low\[email protected][6].txt
C:\Users\benito\Cookies\Low\[email protected][7].txt
C:\Users\benito\Cookies\Low\[email protected][8].txt
C:\Users\benito\Cookies\Low\[email protected][9].txt

more to follow...

Edited by checkyoulater, 11 February 2008 - 10:20 PM.

  • 0

#38
checkyoulater

checkyoulater

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
C:\Users\benito\Cookies\Low\benito@imrworldwide[2].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\[email protected][3].txt
C:\Users\benito\Cookies\Low\benito@mediaplex[1].txt
C:\Users\benito\Cookies\Low\benito@revenue[2].txt
C:\Users\benito\Cookies\Low\benito@revsci[2].txt
C:\Users\benito\Cookies\Low\benito@serving-sys[2].txt
C:\Users\benito\Cookies\Low\benito@statcounter[1].txt
C:\Users\benito\Cookies\Low\benito@statsgod[1].txt
C:\Users\benito\Cookies\Low\benito@tradedoubler[2].txt
C:\Users\benito\Cookies\Low\[email protected][1].txt
C:\Users\benito\Cookies\Low\benito@zedo[1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@2o7[1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\[email protected][1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@adbrite[1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@adinterax[2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\[email protected][2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\[email protected][2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@advertising[1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@apmebf[1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@atdmt[2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\[email protected][1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@casalemedia[2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\[email protected][1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@doubleclick[2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\[email protected][1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\[email protected][2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@fastclick[2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@hitbox[1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\[email protected][1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@maxserving[1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@mediaplex[1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@overture[2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\[email protected][1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@questionmarket[1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@realmedia[1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@revsci[2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\[email protected][2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\[email protected][1].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@serving-sys[2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@statcounter[2].txt
C:\Windows.old\Documents and Settings\Benito\Cookies\benito@zedo[1].txt

Adware.Vundo Variant
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\AWTQO.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\DDABB.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\DDAYA.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\GEBCA.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\GEBCB.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\JKKLM.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\MLJGH.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\MLJJI.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\MLLMK.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\PMKHH.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\SSQPM.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\VTUTQ.DLL

Trojan.WinFixer
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\AWTQR.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\AWTST.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\AWVTT.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\GEEBC.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\MLJGG.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\MLLMM.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\PMKHI.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\SSQRS.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\SSTTQ.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\VTURO.DLL

Unclassified.Unknown Origin/System
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\DDCYW.DLL
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\PMKJK.DLL

Adware.Vundo Variant/Rel
C:\DECKARD\SYSTEM SCANNER\20080211051441\BACKUP\USERS\BENITO\APPDATA\LOCAL\TEMP\MLKKJ.INI2

Trojan.Unclassified/17PHolmes-A
C:\QOOBOX\QUARANTINE\C\WINDOWS\MROFINU1044.EXE.VIR

Trojan.Unclassifed/AffiliateBundle
C:\QOOBOX\QUARANTINE\C\WINDOWS\SYSTEM32\NNNKLKK.DLL.VIR
C:\VUNDOFIX BACKUPS\NNNKLKK.DLL.BAD



that's how the log ends...next the hijack this log...having problems with hijackthis log it seems to keep showing the older log, maybe i need to reboot, and try again

Edited by checkyoulater, 11 February 2008 - 10:26 PM.

  • 0

#39
checkyoulater

checkyoulater

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
i rebooted, and tried re-installing but it said hijck was still running so i quit it from the processes tab in the task manager and re-installed (just thought that might be helpful)

no more access denied write error from hijack this...

here goes....


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:30:25 PM, on 2/12/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Windows\SOUNDMAN.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\System32\rundll32.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.philmug.p...isplay.php?f=60
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 5207 bytes
  • 0

#40
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
Your logs are clean ! We need to do a few things

Now lets uninstall Combofix:
  • Click START then RUN
  • Now type Combofix /u in the runbox and click OK
The above procedure will do the following:
  • Delete ComboFix and its associated files and folders.
  • Delete VundoFix backups, if present
  • Delete the C:\Deckard folder, if present
  • Delete the C:_OtMoveIt folder, if present
  • Reset the clock settings.
  • Hide file extensions, if required.
  • Hide System/Hidden files, if required.
  • Reset System Restore.



  • Make sure you have an Internet Connection.
  • Double-click OTMoveIt2.exe to run it.
  • Click on the CleanUp! button
  • A list of tool components used in the Cleanup of malware will be downloaded.
  • If your Firewall or Real Time protection attempts to block OtMoveit2 to rech the Internet, please allow the application to do so.
  • Click Yes to beging the Cleanup process and remove these components, including this application.
  • You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.


You now need to update your Java and remove your older versions.

Please follow these steps to remove older version Java components.

* Click Start > Control Panel.
* Click Add/Remove Programs.
* Check any item with Java Runtime Environment (JRE) in the name.
* Click the Remove or Change/Remove button.

Download the latest version of Java Runtime Environment (JRE), and install it to your computer from
here



Below I have included a number of recommendations for how to protect your computer against malware infections.

* Keep Windows updated by regularly checking their website at :
http://windowsupdate.microsoft.com/
This will ensure your computer has always the latest security updates available installed on your computer.

* To reduce re-infection for malware in the future, I strongly recommend installing these free programs:
SpywareBlaster protects against bad ActiveX
IE-SPYAD puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all
Have a look at this tutorial for IE-Spyad here

* SpywareGuard offers realtime protection from spyware installation attempts.

Make Internet Explorer more secure
  • Click Start > Run
  • Type Inetcpl.cpl & click OK
  • Click on the Security tab
  • Click Reset all zones to default level
  • Make sure the Internet Zone is selected & Click Custom level
  • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
  • Next Click OK, then Apply button and then OK to exit the Internet Properties page.

* MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.

* Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more
secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in pop up
blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from
Here

* Take a good look at the following suggestions for malware prevention by reading Tony Klein’s article 'How Did I Get Infected In The First Place'
Here

Thank you for your patience, and performing all of the procedures requested.
  • 0

Advertisements


#41
checkyoulater

checkyoulater

    Member

  • Topic Starter
  • Member
  • PipPip
  • 25 posts
thanks again!

i'll be reading up on your suggestions for both PC and laptop...so far sa good nothing seems to be bothering me in my PC or laptop anymore

thanks again so very much!!!
  • 0

#42
Rorschach112

Rorschach112

    Ralphie

  • Retired Staff
  • 47,710 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP