Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Problem with variant spyware killers

Started by milanmagan , Sep 04 2005 01:27 AM

  • Please log in to reply

#1
milanmagan
Posted 04 September 2005 - 01:27 AM

milanmagan

    Member

  • Member
  • PipPip
  • 50 posts
Okay on my comp I got hijackthis, Xoftspy [paid for it :tazz: ], Clean Up, Emco, Ad-Aware, RegSeeker and AntiVir.

This is the problem: the free version of NoAdware I have got (whereby you can't delete the things it finds) keeps showing me I got some stuff on my comp that the others don't find...

Is this NoAdware like, super-smart, or is it just super-crap?




Here's what it says I have, which I can't find on my comp, but which come up every time...


- BazookaBar (regvalue, listed as dangerous)
- Spyware.NetVizor (regvalue, listed as severe)
- three kazaa fonts (lists these as severe: arsec.fon, arsecB.fon and arsecl.fon)



I can't find any of these in my registry, where it tells me they are...

Because it keeps showing these things up, and lists them as severe and critical I'm kinda worried. Any advice????

THankS
  • 0

Advertisements

#2
Excal
Posted 04 September 2005 - 01:39 AM

Excal

    Malware Slayer Extraordinaire!

  • Retired Staff
  • 12,739 posts
Hi milanmagan and welcome to Geekstogo!

NoAdware is not a trusted anti-spyware program. These are some of the reasons:
false positives and the use of aggressive, deceptive advertising.

Xoftspy is also not one.

check this site out for a complete list:

http://www.spywarewa...re.htm#naw_note

Go ahead and post a HiJackthis log and let me take a look.

Thanks,

:tazz:

Excal
  • 0

#3
milanmagan
Posted 04 September 2005 - 03:14 AM

milanmagan

    Member

  • Topic Starter
  • Member
  • PipPip
  • 50 posts
THanks for your advice. Here we go:

Logfile of HijackThis v1.99.1
Scan saved at 9:14:16 PM, on 9/4/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
C:\WINDOWS\explorer.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Magan.MAGAN-0QEMXNI9D\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [QveCtl2Tray] C:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec....sa/LSSupCtl.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec....sa/SymAData.cab
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
  • 0

#4
Excal
Posted 04 September 2005 - 10:23 AM

Excal

    Malware Slayer Extraordinaire!

  • Retired Staff
  • 12,739 posts
Jotti File Submission:
  • Please go to Jotti's malware scan
  • Copy and paste the following file path into the "File to upload & scan"box on the top of the page:
    • C:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
  • Click on the submit button
  • Please post the results in your next reply.

  • 0

#5
milanmagan
Posted 05 September 2005 - 11:57 PM

milanmagan

    Member

  • Topic Starter
  • Member
  • PipPip
  • 50 posts
Hi man, here are the results (that program came with my new stereo, means I can play mp3s through it):

AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
UNA
Found nothing
VBA32
Found nothing
  • 0

#6
Excal
Posted 06 September 2005 - 01:36 PM

Excal

    Malware Slayer Extraordinaire!

  • Retired Staff
  • 12,739 posts
The Temp folders should be cleaned out periodically as installation programs and hijack programs leave a lot of junk there. Download CleanUp! (Alternate Link if the main link does not work) and install it. Please Do not run yet.

Please download ewido security suite it is a trial version of the program.
  • Install ewido security suite
  • When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
  • Launch ewido, there should be an icon on your desktop double-click it.
  • The program will now go to the main screen
You will need to update ewido to the latest definition files.
  • On the left hand side of the main screen click update
  • Then click on Start Update
The update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can use this link to manually update ewido.
ewido manual updates

Reboot into safe mode.

Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.


Run CleanUp! and click on CleanUp! button. When it asks you if you want to logoff, click on Yes.

Open up and run Ewido:
  • Click on scanner
  • Click Complete System Scan and the scan will begin.
  • During the scan when it ask if you want to clean the first file, put a check in the lower left corner of the box that says "Perform action on all infections" then choose clean and click OK
  • When the scan is finished, look at the bottom of the screen and click the Save report button.
  • Save the report to your desktop
Close Ewido


Reboot into normal mode and please run this online virus scan: ActiveScan - Save the results from the scan!


Please post the Active scan log, Ewido Log and a fresh HiJackThis log. Let me know how your computer is running.
  • 0

#7
milanmagan
Posted 08 September 2005 - 11:05 PM

milanmagan

    Member

  • Topic Starter
  • Member
  • PipPip
  • 50 posts
Hi there, the online activescan link you gave me doesn't work...


I did everything you said, and here's the erwido log:

---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 4:58:10 PM, 9/9/2005
+ Report-Checksum: 9BD90F4A

+ Scan result:

HKLM\SOFTWARE\Need2Find -> Spyware.Need2Find : Cleaned with backup
HKLM\SOFTWARE\Need2Find\bar -> Spyware.Need2Find : Cleaned with backup
HKLM\SOFTWARE\Need2Find\bar\Partner -> Spyware.Need2Find : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Magan.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\u2tgfbqv.default\cookies-1.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.27:C:\Documents and Settings\Magan.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\u2tgfbqv.default\cookies-1.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.15:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.16:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.41:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.42:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.51:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.54:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.61:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.62:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.69:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Estat : Cleaned with backup
:mozilla.70:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Weborama : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Weborama : Cleaned with backup
:mozilla.73:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Weborama : Cleaned with backup
:mozilla.75:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.79:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.80:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.81:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.90:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.91:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.96:C:\Documents and Settings\Other.MAGAN-0QEMXNI9D\Application Data\Mozilla\Firefox\Profiles\zb6rmjp1.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.6:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.7:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.8:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.9:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.10:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.11:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.12:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.13:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.14:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.15:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.16:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.18:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.19:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.20:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.21:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.22:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.23:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.24:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.25:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.26:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.27:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.28:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.29:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.30:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.31:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.32:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.33:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.34:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.35:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.36:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.37:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.38:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.39:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.40:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.41:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.42:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.43:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.44:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.45:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.46:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.47:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.48:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.49:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.50:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.51:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.52:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.53:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.54:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.55:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.56:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.57:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.58:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.59:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.60:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.61:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.62:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.63:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.64:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.65:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.66:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.67:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.68:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.69:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.78:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.81:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.82:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.83:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.84:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.85:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.86:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.103:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.109:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.110:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.130:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.131:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.154:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.155:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.163:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.164:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.165:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.166:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.167:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.168:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.169:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.170:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.171:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.172:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.173:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.174:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.194:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Paycounter : Cleaned with backup
:mozilla.210:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Porntrack : Cleaned with backup
:mozilla.220:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.221:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.222:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.223:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sextracker : Cleaned with backup
:mozilla.224:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sextracker : Cleaned with backup
:mozilla.225:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Masterstats : Cleaned with backup
:mozilla.242:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.247:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.259:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup
:mozilla.266:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.267:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.272:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Clickhype : Cleaned with backup
:mozilla.290:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.291:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.292:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.293:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.294:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.295:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.296:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.301:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.312:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.313:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.322:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.323:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.324:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.329:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.330:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.331:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.333:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.355:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.356:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.357:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.358:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.359:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.360:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.361:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.376:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.377:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.378:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.384:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.385:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.386:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.387:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.409:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Bfast : Cleaned with backup
:mozilla.412:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.420:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.421:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.422:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.433:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.436:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.437:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.441:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.458:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.463:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.464:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.465:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.466:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.469:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.477:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
:mozilla.481:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Ad-logics : Cleaned with backup
:mozilla.483:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.484:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.485:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.486:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.487:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.501:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.502:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.503:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.504:C:\ErdUndoCache\E0000025\Application Data\Mozilla\Firefox\Profiles\s8izkuri.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.11:C:\ErdUndoCache\E0000026\Application Data\Mozilla\Firefox\Profiles\gsklie55.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup


::Report End








And secondly, a fresh hijackthis log:












Logfile of HijackThis v1.99.1
Scan saved at 5:03:43 PM, on 9/9/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\AVPersonal\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Documents and Settings\Magan.MAGAN-0QEMXNI9D\Desktop\hijackthis\HijackThis.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [QveCtl2Tray] C:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec....sa/LSSupCtl.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec....sa/SymAData.cab
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
  • 0

#8
Excal
Posted 08 September 2005 - 11:45 PM

Excal

    Malware Slayer Extraordinaire!

  • Retired Staff
  • 12,739 posts
This one will:

Run this online virus scan: ActiveScan - Please save and post the results from the scan!
  • 0

#9
milanmagan
Posted 09 September 2005 - 06:28 PM

milanmagan

    Member

  • Topic Starter
  • Member
  • PipPip
  • 50 posts
Hi there:

Detected Disinfected
Virus 0 0
Spyware 0 0
Hacking Tools 0 0
Dialers 0 0
Security Risks 0 0
Suspicious files 0 0


I will run another check later, I'm just on my way out
  • 0

#10
Excal
Posted 09 September 2005 - 09:28 PM

Excal

    Malware Slayer Extraordinaire!

  • Retired Staff
  • 12,739 posts
K, will await your response :)

:tazz:

Excal
  • 0

Advertisements

#11
milanmagan
Posted 14 September 2005 - 05:02 AM

milanmagan

    Member

  • Topic Starter
  • Member
  • PipPip
  • 50 posts
OKay. Sorry it's taken me so long to post again but I've been real busy.

So I ran the activescan again, and it found two adware files. One in c:/windows/woinstall.exe and another in c:/programfiles/0catyellowpages

I deleted the .exe file and the yellowpages folder - which was, or at least seemed, empty anyway...

Just before I closed the scan window I saw the word "ezula" for what it had found in woinstall.exe




So... both of these are deleted...
  • 0

#12
Excal
Posted 14 September 2005 - 05:34 AM

Excal

    Malware Slayer Extraordinaire!

  • Retired Staff
  • 12,739 posts
Great! is everything running fine now?

:tazz:

Excal
  • 0

#13
milanmagan
Posted 15 September 2005 - 12:11 AM

milanmagan

    Member

  • Topic Starter
  • Member
  • PipPip
  • 50 posts
Hmm... yea I guess so. I was going to post this in another forum, but the only problem I have with my computer now, and this has only been a very recent problem [6 weeks or so] is that Microsoft Word keeps freezing up [for up to a minute] every time I save my work. Should I start another topic about that?

Apart from that everything's great, yeah :tazz:
  • 0

#14
milanmagan
Posted 15 September 2005 - 12:12 AM

milanmagan

    Member

  • Topic Starter
  • Member
  • PipPip
  • 50 posts
Oh yes, and the same thing keeps happening with Moxilla Firefox :tazz:
  • 0

#15
milanmagan
Posted 15 September 2005 - 12:13 AM

milanmagan

    Member

  • Topic Starter
  • Member
  • PipPip
  • 50 posts
Often when I'm using multiple windows.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP