Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Winfixer2005 problems on XP [CLOSED]


  • This topic is locked This topic is locked

#1
jessycacb

jessycacb

    New Member

  • Member
  • Pip
  • 8 posts
:tazz: Winfixer2005 seems to be taking over my compaq laptop. I use Firefox browser (IE always crashes my computer by 100's of popups) It will change the page I'm viewing, close out my browser, and sometimes even shuts down my computer. When the page changes it will change to either winfixer2005 page or a few others. I run Microsoft Antispyware, RegScrubXP, Adaware SE, Spybot Search and Destroy, and Counterspy, and Hijack this. Here is a copy of my HiJack this log from today. Please let me know if there is anything you can do for me or if you need anything else. Thank you for anything you can help me with.

Logfile of HijackThis v1.99.1
Scan saved at 5:42:03 PM, on 8/12/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\SmVzc3ljYQAA\command.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\hphmon06.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe
C:\Program Files\Sunbelt Software\CounterSpy Client\sunasServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm
O4 - HKLM\..\Run: [WG511WLU] C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\Hewlett-Packard\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\System32\hphmon06.exe
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [sunasDTServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe
O4 - HKLM\..\Run: [sunasServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasServ.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O20 - Winlogon Notify: Syncmgr - C:\WINDOWS\system32\cympobj.dll
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\SmVzc3ljYQAA\command.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\System32\hpbpro.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

P.S. Maybe you can also tell me what makes me have so many system problems with things like this. (i.e. is it pages I view online or downloads) Thanks! Jessyca
  • 0

Advertisements


#2
greyknight17

greyknight17

    Malware Expert

  • Visiting Consultant
  • 16,560 posts
Hi Jessyca and welcome to GTG.

Jessyca with a y and not an i :tazz:

No problem, we can help you fix this problem. Yes, you could have gotten this from just visiting a site to downloading and running a program. We will give you antispyware programs to help protect you from running into these problems that easily - after we are all clear.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Please download Ewido Security Suite at http://www.ewido.net/en/download/.

1. Install Ewido Security Suite.
2. When installing, under 'Additional Options' uncheck:
* Install background guard
* Install scan via context menu
3. Launch Ewido, there should be an icon on your desktop, double click it.
4. The program will now open to the main screen.
5. When you run Ewido for the first time, you will get a warning 'Database could not be found!'. Click OK. We will fix this in a moment.
6. You will need to update Ewido to the latest definition files.
* On the left hand side of the main screen click update.
* Then click on Start Update.
7. The update will start and a progress bar will show the updates being installed. The status bar at the bottom will display 'Update successful'.
8. Exit Ewido. DO NOT scan yet.

If you are having problems with the updater, you can go to http://www.ewido.net...wnload/updates/ to update manually.

Download Nailfix Utility at http://www.noidea.us...050711214630636 Save it to your desktop. Do NOT run it yet.

Download CleanUp! http://cleanup.stevengould.org/ (Alternate Link if main link don't work - http://www.greyknigh...spy/CleanUp.exe ) and install it. Don't run it yet.

Restart your computer and boot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work.

Once in Safe Mode, double click on nailfix.exe.
Click 'Next' in the setup, then make sure 'Run Nailfix' is checked and click 'Finish'.
Your desktop and icons will disappear and reappear, and a window should open and close very quickly --- this is normal.

CleanUp! deletes EVERYTHING out of your temp/temporary folders, it does not make backups. If you have any documents or programs that are saved in any Temporary Folders, please make a backup of these before running CleanUp!. Run CleanUp! and click on the Options button. Uncheck 'Scan local drives for temporary files'. Also uncheck those two Newsgroup entries if you don't want to delete them. Click OK and then click on the CleanUp! button. Let it run. After it's done, choose Yes to logoff.

Now open Ewido and do a scan on your system.

* Click on scanner
* Click on Complete System Scan and the scan will begin.
* NOTE: During some scans with Ewido it is finding cases of false positives.
o You will need to step through the process of cleaning files one-by-one.
o If Ewido detects a file you KNOW to be legitimate, select none as the action.
o Do NOT select 'Perform action on all infections'
o If you are unsure of any entry found, select none for now as the action.
* Once the scan has completed, there will be a button located on the bottom of the screen named Save report
* Click Save report.
* Save the report .txt file to your desktop or a location where you can find it easily.

Go to Start->Run and type in services.msc and hit OK. Then look for cmdService and double click on it. Click on the Stop button and under Startup type, choose Disabled.

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm
O20 - Winlogon Notify: Syncmgr - C:\WINDOWS\system32\cympobj.dll
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\SmVzc3ljYQAA\command.exe


Locate and delete the following:

C:\WINDOWS\system32\cympobj.dll
C:\WINDOWS\SmVzc3ljYQAA\


Restart your computer and post the Ewido log and a new HijackThis log...along with the following log:

Download L2MFix from one of these two locations:

http://www.atribune....oads/l2mfix.exe
http://www.downloads....org/l2mfix.exe

Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts. Then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing Enter. This will scan your computer and it may appear nothing is happening. After a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.

IMPORTANT: Do NOT run option #2 or any other files in the l2mfix folder until you are asked to do so!

  • 0

#3
jessycacb

jessycacb

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
Hey Greynight! It's Jessyca with a y! :tazz: I am going to run all of that today. It will probably take me a while so.......I'll hit you up when I am done and let you know how it went. Thank you so much for taking the time to help me out. -Jessyca

Edited by jessycacb, 13 August 2005 - 10:35 AM.

  • 0

#4
jessycacb

jessycacb

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
Logfile of HijackThis v1.99.1
Scan saved at 9:20:15 PM, on 8/14/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\hphmon06.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Sunbelt Software\CounterSpy Client\sunasServ.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm
O4 - HKLM\..\Run: [WG511WLU] C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\Hewlett-Packard\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\System32\hphmon06.exe
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [sunasDTServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe
O4 - HKLM\..\Run: [sunasServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasServ.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O20 - Winlogon Notify: Internet Settings - C:\WINDOWS\system32\dzmstor.dll
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\System32\hpbpro.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 8:59:31 PM, 8/14/2005
+ Report-Checksum: C4B14B42

+ Scan result:

[220] C:\WINDOWS\system32\dzmstor.dll -> Spyware.Look2Me : Error during cleaning
[1480] C:\WINDOWS\system32\drcpmon.dll -> Spyware.Look2Me : Error during cleaning
:mozilla.14:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.15:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.16:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.17:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.18:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.32:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.33:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.35:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Epilot : Cleaned with backup
:mozilla.36:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.37:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Hypertracker : Cleaned with backup
:mozilla.41:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.43:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.44:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.45:C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\Mozilla\Firefox\Profiles\gjo5g6xk.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.32:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.45:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.51:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.58:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Linksynergy : Cleaned with backup
:mozilla.59:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Linksynergy : Cleaned with backup
:mozilla.74:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.75:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.77:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.82:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.83:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.84:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.85:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.86:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.87:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.88:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.90:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.91:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.92:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.93:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.94:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.95:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.96:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.108:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.110:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.111:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.112:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.119:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.120:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.131:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.132:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.133:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.134:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.138:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.139:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.140:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.141:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.151:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.152:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.157:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.158:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.159:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.175:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.179:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.180:C:\Documents and Settings\Jessyca.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\esr0udzy.Default User\cookies.txt -> Spyware.Cookie.Adviva : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Greg.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\d5698ph0.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Greg.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\d5698ph0.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Greg.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\d5698ph0.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.55:C:\Documents and Settings\Greg.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\d5698ph0.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.56:C:\Documents and Settings\Greg.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\d5698ph0.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.61:C:\Documents and Settings\Greg.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\d5698ph0.default\cookies.txt -> Spyware.Cookie.Hypertracker : Cleaned with backup
:mozilla.65:C:\Documents and Settings\Greg.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\d5698ph0.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.78:C:\Documents and Settings\Greg.UNIVERSITYOFHOU\Application Data\Mozilla\Firefox\Profiles\d5698ph0.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
C:\Program Files\AVPersonal\INFECTED\smsc.VIR -> Backdoor.Wootbot : Cleaned with backup
C:\Program Files\AVPersonal\INFECTED\smsc.VIR00 -> Backdoor.Wootbot : Cleaned with backup
C:\Program Files\AVPersonal\INFECTED\smsc.VIR01 -> Backdoor.Wootbot : Cleaned with backup
C:\Program Files\AVPersonal\INFECTED\smsc.VIR02 -> Backdoor.Wootbot : Cleaned with backup
C:\Program Files\AVPersonal\INFECTED\Msconf32.VIR -> Heuristic.Win32.Morphine-Crypted : Cleaned with backup
C:\Program Files\AVPersonal\INFECTED\Msconf32.VIR00 -> Heuristic.Win32.Morphine-Crypted : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\AF1E2F48-8229-4EDD-A9D6-4D523B\F8D501A2-88C0-439A-AE3F-B3F08D -> Spyware.BargainBuddy : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\AF1E2F48-8229-4EDD-A9D6-4D523B\14F84A75-299E-45C6-B0FC-80E520 -> Spyware.BargainBuddy : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\Quarantine\5B4A2EC2-B3FC-4A88-BE9B-99CE7D\73C31FEE-262B-4B37-8D0F-2AF6CA -> Spyware.BookedSpace : Cleaned with backup
C:\Program Files\Microsoft AntiSpyware\DeactivatedItems\CD627C29-C9B2-4DA0-856F-F111BA.asq -> TrojanDownloader.Qoologic.n : Cleaned with backup
:mozilla.10:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.11:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.12:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.13:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.14:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.15:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.16:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.17:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.18:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.27:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.28:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.34:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.35:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.40:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.43:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.44:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.45:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.46:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.49:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.50:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.59:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.61:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.62:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.63:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.64:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.65:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.66:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.67:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.68:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.69:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.73:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.74:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.75:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.76:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.88:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.89:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.90:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.91:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.92:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.93:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.94:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.95:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.96:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.97:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.98:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.99:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.100:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.101:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.102:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.103:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.104:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.105:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.106:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.107:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.108:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.109:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.110:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.111:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.112:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.113:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.114:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.115:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.116:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.117:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.118:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.119:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.120:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.121:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.122:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.123:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.124:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.125:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.126:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.127:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.128:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.129:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.134:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.135:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.136:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.158:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.161:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.162:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.163:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.164:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.165:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.173:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.174:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.175:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.176:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.178:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.181:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.182:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.199:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.206:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.207:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.218:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.219:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.221:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.222:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.223:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.224:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.225:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.226:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.227:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.228:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.229:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.230:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.231:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.232:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.242:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.243:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.244:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.246:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.247:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.248:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.251:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.252:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.253:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.254:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.255:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.256:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.257:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.258:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.259:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.260:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.261:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.262:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.263:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.264:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.265:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.266:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.267:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.268:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.269:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.270:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.271:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.272:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.273:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.274:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.275:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.276:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.277:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.278:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.279:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.280:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.281:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.282:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.285:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Coremetrics : Cleaned with backup
:mozilla.294:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.295:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.307:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.324:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.331:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.332:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.333:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.334:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.335:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Bluestreak : Cleaned with backup
:mozilla.345:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.348:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.349:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.353:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.354:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.355:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.356:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.357:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.358:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.359:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.360:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.361:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.364:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.365:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.367:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.368:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.369:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.370:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.375:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.376:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.377:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.378:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.379:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.381:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.382:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.390:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.391:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.392:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.393:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.394:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.395:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.396:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.398:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.399:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.413:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.414:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.415:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.416:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.420:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.424:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.429:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Adjuggler : Cleaned with backup
:mozilla.448:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.454:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Bfast : Cleaned with backup
:mozilla.455:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.456:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.457:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.458:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.459:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.460:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.461:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.462:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.463:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.464:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.465:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.466:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.467:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.468:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.469:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.470:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Ru4 : Cleaned with backup
:mozilla.471:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Euniverseads : Cleaned with backup
:mozilla.472:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.473:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.474:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.505:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.506:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.507:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.508:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.509:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.510:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.511:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.512:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.515:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.516:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.517:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.527:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.528:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.530:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.544:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.545:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.546:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.549:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.550:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.551:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.552:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.553:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.558:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.559:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.560:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.561:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.562:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.563:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.565:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.566:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.567:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.568:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.569:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.570:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.571:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.572:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.579:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.580:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.581:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.584:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.585:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.586:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.587:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.588:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.595:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.597:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.600:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.601:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.605:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.608:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.609:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.611:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.612:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.614:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.619:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.620:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.621:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.626:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.627:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.631:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.633:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.651:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Revenue : Cleaned with backup
:mozilla.684:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.687:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.695:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.722:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.741:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.742:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.745:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.771:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.772:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.773:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.774:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.775:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.776:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.777:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.778:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.784:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.785:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.792:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.795:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.797:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.804:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.805:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Spylog : Cleaned with backup
:mozilla.808:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.812:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.813:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.814:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.815:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.816:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.817:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.818:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.819:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.820:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.821:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.822:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.823:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.824:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.826:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.827:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.828:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.829:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.830:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.831:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.832:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.833:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.834:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.835:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.836:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.837:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.862:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.863:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.864:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.870:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.871:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.875:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.879:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.881:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.882:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.898:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.899:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.900:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.901:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.904:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.905:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.910:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.911:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.912:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.913:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.914:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.917:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.922:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.923:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.924:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.925:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.926:C:\FOUND.004\FILE0007.CHK -> Spyware.Cookie.Esomn
  • 0

#5
jessycacb

jessycacb

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
Hey Greynight, The L2MFix application I downladed when I got to that part of the instructions was for a different operating system. It was NT, 95, 98, or 2000 but not XP. So... what should I do? The file downloads, then I double click on my desktop and click accept to install. I get no prompts but the new folder shows up on my desktop. I open that and when I try to click on the l2mfix.bat file to open it nothing happens. Thanks for any assistance you can provide me with. I all ready listed the two logs when the instructions told me too, will I have to go through the whole process again or just start at the place that I left off at?

Edited by jessycacb, 15 August 2005 - 12:20 AM.

  • 0

#6
greyknight17

greyknight17

    Malware Expert

  • Visiting Consultant
  • 16,560 posts
Hi Jessyca, no need to redo all of this.

Try running L2MFix with option #1 again. If it still gives you problems, try running it in Safe Mode. See how long it takes. It shouldn't take more than a few minutes I think. If it still won't work, does it give you any errors?
  • 0

#7
jessycacb

jessycacb

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
The l2mfix.bat still does not open. And in safe mode the desktop icons or nothing for l2mfix shows up. So I couldn't try to run it with command 1.
  • 0

#8
jessycacb

jessycacb

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
Also, now when I boot up and XP opens now I get a msg box that pops up that says Virtual Runtime Memory Low...... And the options for that box is retry, ignore, or cancel. Anyways when that box is open the Task Manager recognizes it as: GIANT spyware updater. Also when that box is open, I can't open any other programs till it is closed. (Otherwise I would have retyped the box into notepad so you could see what it says) So thats what is going on.
  • 0

#9
jessycacb

jessycacb

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
Just incase those infections are going crazy, here is a fresh HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 10:38:55 AM, on 8/16/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\hphmon06.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe
C:\Program Files\Sunbelt Software\CounterSpy Client\sunasServ.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm
O4 - HKLM\..\Run: [WG511WLU] C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb11.exe
O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\Hewlett-Packard\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\System32\hphmon06.exe
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [sunasDTServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasDTServ.exe
O4 - HKLM\..\Run: [sunasServ] C:\Program Files\Sunbelt Software\CounterSpy Client\sunasServ.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O20 - Winlogon Notify: App Management - C:\WINDOWS\system32\dzmstor.dll
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\System32\hpbpro.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
  • 0

#10
greyknight17

greyknight17

    Malware Expert

  • Visiting Consultant
  • 16,560 posts
Hi Jessyca, I need you to give me two files. I need to email them to the author and he will take a look at them.

Give me these two files:

c:\windows\system32\cmd.exe
c:\windows\system32\autoexec.nt


or sometimes it's at -> c:\windows\repair\autoexec.nt

I will send you a PM with my email. Just zip those two files up and email them to me.
  • 0

#11
jessycacb

jessycacb

    New Member

  • Topic Starter
  • Member
  • Pip
  • 8 posts
Ok, I will email them to you.

Edited by jessycacb, 18 August 2005 - 04:36 PM.

  • 0

#12
greyknight17

greyknight17

    Malware Expert

  • Visiting Consultant
  • 16,560 posts
Thanks Jessyca :tazz:

I have emailed those files to the author. He will take a look at this and get back to us soon.

If you don't get a reply back from me within 2 days, I want you to reply to this topic (just in case I lost track of it).
  • 0

#13
greyknight17

greyknight17

    Malware Expert

  • Visiting Consultant
  • 16,560 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP