[j.mccarter]

Hi everyone....first off let me say thanks for any help you can give...

I am having a big problem with these cassava,venus 123 etc. etc. etc. pop-ups.

I have run several spyware detectors (ad-aware SE, Trojan Hunter, etc.) as well as my own Mcafee Virus scan and the online virus searches as requested on the info page.

below is my latest HJT log.....hope someone can help.....Thanks again!

Logfile of HijackThis v1.99.1
Scan saved at 1:13:57 PM, on 11/22/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\netdde.exe
C:\WINDOWS\system32\cisvc.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\tlntsvr.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Microangelo\muamgr.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
c:\program files\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LMPDPSRV.EXE
C:\Program Files\Lexmark X125\LEX125SU.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\McAfee.com\Personal Firewall\MpfTray.exe
C:\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.comcast.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 194.242.130.2:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - <default> - (no file)
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~2\COMCAS~1.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MOD] C:\Program Files\Microangelo\muamgr.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [LMPDPSRV] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LMPDPSRV.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lexmark X125 Settings Utility.lnk = C:\Program Files\Lexmark X125\LEX125SU.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI01DA~1\Office10\EXCEL.EXE/3000
O9 - Extra button: Help - {327BBB14-259E-44FC-BB41-D8ACAE98D40D} - http://www.comcast.net/memberservices/ (file missing) (HKCU)
O9 - Extra button: ComcastHSI - {F3FA7075-8618-4B11-A162-A6112FB37F25} - http://www.comcast.net (file missing) (HKCU)
O9 - Extra button: Support - {FC808C68-A9DE-4374-9424-1E17AF9249EE} - http://www.comcastsupport.com (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {2871FC9B-5E34-4AAE-9E9C-EBD1652D5C92} (Rhapsody Player Engine) - http://forms.real.co...ne_Inst_Win.cab
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip....pGameLoader.dll
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} - http://tools.ebayimg...ol_v1-0-3-9.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...96/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1123577022940
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://gamesoduser.c...es/ExentCtl.ocx
O16 - DPF: {6BEA1C48-1850-486C-8F58-C7354BA3165E} (Install Class) - http://updates.lifes...ll/pinstall.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,26/mcgdmgr.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.c...ers/play365.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.app.../ITDetector.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - https://support.myho...oad/XUpload.ocx
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredim...er/imloader.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.ao.../ampx_en_dl.cab
O20 - Winlogon Notify: Nls - C:\WINDOWS\
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe

[Advertisements]

Hello j.mccarter and welcome to Geeks to Go

As an introduction, please note that I am not Superhuman, I do not know everything, but what I do know has taken me years to learn. I am happy to pass on this information to you, but please bear in mind that I am also fallible.

Please note that you should have Administrator rights to perform the fixes. Also note that multiple identity PC’s (family PC’s) present a different problem; please tell me if your PC has more than one individual’s setting, but continue with the fix.

Before we get underway, you may wish to print these instructions for easy reference during the fix, although please be aware that many of the required URLs are hyperlinks in the red names shown on your screen. Part of the fix may require you to be in Safe Mode, which will not allow you to access the internet, or my instructions!

You have a little malware to be eradicated. Let’s see what we can do with the first sweep.

Do you know this name and address? Hurstpierpoint College
Administrative Contact's Address: 44 Whitfield Street London W1P 5RF

To start please download the following programmes, we will run them later. Please save them to a place that you will remember, I suggest the Desktop:

CCleaner
Ewido Security Suite

Install Ewido Security Suite.

• Install Ewido security suite
• When installing, under "Additional Options" uncheck..
  • Install background guard
  • Install scan via context menu
  • You will need to update Ewido to the latest definition files.
  • On the left hand side of the main screen click update.
  • Then click on Start Update.
• The update will start and a progress bar will show the updates being installed.
  (the status bar at the bottom will display "Update successful")

If you are having problems with the updater, you can use this link to manually update Ewido.
Ewido manual updates
Do NOT run a scan yet.

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

For additional help in booting into Safe Mode, see the following site:

Safe Mode

Launch Ewido, there should be an icon on your desktop, double-click it.

• The programme will now open to the main screen.
• When you run Ewido for the first time, you will get a warning "Database could not be found!". Click OK.

Once the updates are installed do the following:

• Click on scanner
• Click on Complete System Scan and the scan will begin.
• You will be prompted to clean the first infection.
• Select "Perform action on all infections", then proceed.
• Once the scan has completed, there will be a button located on the bottom of the screen named Save report
• Click Save report.
  
• Save the report .txt file to your desktop and include it in your reply.

Now close Ewido security suite.

Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below.

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: (no name) - <default> - (no file)
O9 - Extra button: ComcastHSI - {F3FA7075-8618-4B11-A162-A6112FB37F25} - http://www.comcast.net (file missing) (HKCU)
O9 - Extra button: Support - {FC808C68-A9DE-4374-9424-1E17AF9249EE} - http://www.comcastsupport.com (file missing) (HKCU)
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip....pGameLoader.dll
O16 - DPF: {6BEA1C48-1850-486C-8F58-C7354BA3165E} (Install Class) - http://updates.lifes...ll/pinstall.cab

Now close all windows other than HiJackThis, then click Fix Checked.

There is almost certainly bound to be some junk (leftover bits and pieces) on your system that is doing nothing but taking up space. I would recommend that you run CCleaner. Install it, update it, check the default setting in the left-hand pane, ensure you uncheck old prefetch data found under the system tab, then click Analyze> Run Cleaner. You may be fairly surprised by how much it finds. Also click Issues then Scan for issues – fix selected issues

Post back a fresh HijackThis log (from normal mode) and I will take another look. (2 logs in total).

[Crustyoldbloke]

Hello j.mccarter and welcome to Geeks to Go

As an introduction, please note that I am not Superhuman, I do not know everything, but what I do know has taken me years to learn. I am happy to pass on this information to you, but please bear in mind that I am also fallible.

Please note that you should have Administrator rights to perform the fixes. Also note that multiple identity PC’s (family PC’s) present a different problem; please tell me if your PC has more than one individual’s setting, but continue with the fix.

Before we get underway, you may wish to print these instructions for easy reference during the fix, although please be aware that many of the required URLs are hyperlinks in the red names shown on your screen. Part of the fix may require you to be in Safe Mode, which will not allow you to access the internet, or my instructions!

You have a little malware to be eradicated. Let’s see what we can do with the first sweep.

Do you know this name and address? Hurstpierpoint College
Administrative Contact's Address: 44 Whitfield Street London W1P 5RF

To start please download the following programmes, we will run them later. Please save them to a place that you will remember, I suggest the Desktop:

CCleaner
Ewido Security Suite

Install Ewido Security Suite.

• Install Ewido security suite
• When installing, under "Additional Options" uncheck..
  • Install background guard
  • Install scan via context menu
  • You will need to update Ewido to the latest definition files.
  • On the left hand side of the main screen click update.
  • Then click on Start Update.
• The update will start and a progress bar will show the updates being installed.
  (the status bar at the bottom will display "Update successful")

If you are having problems with the updater, you can use this link to manually update Ewido.
Ewido manual updates
Do NOT run a scan yet.

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

For additional help in booting into Safe Mode, see the following site:

Safe Mode

Launch Ewido, there should be an icon on your desktop, double-click it.

• The programme will now open to the main screen.
• When you run Ewido for the first time, you will get a warning "Database could not be found!". Click OK.

Once the updates are installed do the following:

• Click on scanner
• Click on Complete System Scan and the scan will begin.
• You will be prompted to clean the first infection.
• Select "Perform action on all infections", then proceed.
• Once the scan has completed, there will be a button located on the bottom of the screen named Save report
• Click Save report.
  
• Save the report .txt file to your desktop and include it in your reply.

Now close Ewido security suite.

Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below.

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: (no name) - <default> - (no file)
O9 - Extra button: ComcastHSI - {F3FA7075-8618-4B11-A162-A6112FB37F25} - http://www.comcast.net (file missing) (HKCU)
O9 - Extra button: Support - {FC808C68-A9DE-4374-9424-1E17AF9249EE} - http://www.comcastsupport.com (file missing) (HKCU)
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} - http://www.miniclip....pGameLoader.dll
O16 - DPF: {6BEA1C48-1850-486C-8F58-C7354BA3165E} (Install Class) - http://updates.lifes...ll/pinstall.cab

Now close all windows other than HiJackThis, then click Fix Checked.

There is almost certainly bound to be some junk (leftover bits and pieces) on your system that is doing nothing but taking up space. I would recommend that you run CCleaner. Install it, update it, check the default setting in the left-hand pane, ensure you uncheck old prefetch data found under the system tab, then click Analyze> Run Cleaner. You may be fairly surprised by how much it finds. Also click Issues then Scan for issues – fix selected issues

Post back a fresh HijackThis log (from normal mode) and I will take another look. (2 logs in total).

[j.mccarter]

Thanks for your help......

Do you know this name and address? Hurstpierpoint College
Administrative Contact's Address: 44 Whitfield Street London W1P 5RF

No I have never seen or heard of this name/address before

I completed all requests, please find the logs below....

---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 4:39:10 PM, 11/22/2005
+ Report-Checksum: 5075DD1A

+ Scan result:

:mozilla.6:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.7:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.247realmedia : Cleaned with backup
:mozilla.8:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.9:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.10:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.11:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.12:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.13:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.14:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.15:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.16:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.17:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.18:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.24:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.27:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Adition : Cleaned with backup
:mozilla.29:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Euroclick : Cleaned with backup
:mozilla.30:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Euroclick : Cleaned with backup
:mozilla.31:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Euroclick : Cleaned with backup
:mozilla.36:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.55:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.56:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.57:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.58:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.59:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.72:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.73:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.77:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.78:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.79:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.80:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.88:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.89:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.97:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.98:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.99:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.121:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.122:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.123:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.124:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.139:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Euniverseads : Cleaned with backup
:mozilla.140:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Euniverseads : Cleaned with backup
:mozilla.184:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Masterstats : Cleaned with backup
:mozilla.196:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Sitestat : Cleaned with backup
:mozilla.197:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Sitestat : Cleaned with backup
:mozilla.254:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Sitestat : Cleaned with backup
:mozilla.270:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.271:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.279:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Paycounter : Cleaned with backup
:mozilla.281:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.293:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.294:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.297:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.303:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup
:mozilla.319:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.320:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.321:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.322:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.323:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.324:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.328:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.329:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.330:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.331:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.332:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.333:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.334:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.335:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.336:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.337:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.338:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.339:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.340:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.341:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.373:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.376:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.381:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.495:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.496:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.497:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.498:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.499:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.500:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.501:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.502:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.509:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.510:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.511:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.512:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.513:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.532:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.533:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.539:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Onestat : Cleaned with backup
:mozilla.540:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Onestat : Cleaned with backup
:mozilla.559:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Burstbeacon : Cleaned with backup
:mozilla.572:C:\Documents and Settings\James\Application Data\Mozilla\Firefox\Profiles\bq44t17z.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
C:\Documents and Settings\James\Cookies\[email protected][2].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\James\Cookies\james@burstnet[1].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
C:\Documents and Settings\James\Cookies\james@com[2].txt -> Spyware.Cookie.Com : Cleaned with backup
C:\Documents and Settings\James\Cookies\[email protected][2].txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
C:\Documents and Settings\James\Cookies\[email protected][1].txt -> Spyware.Cookie.Masterstats : Cleaned with backup
C:\Documents and Settings\James\Cookies\[email protected][1].txt -> Spyware.Cookie.Adjuggler : Cleaned with backup
C:\Documents and Settings\James\Cookies\[email protected][1].txt -> Spyware.Cookie.Liveperson : Cleaned with backup
C:\Documents and Settings\James\Cookies\[email protected][1].txt -> Spyware.Cookie.Burstbeacon : Cleaned with backup
C:\Documents and Settings\James\Cookies\james@yieldmanager[2].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.17:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Atdmt : Error during cleaning
:mozilla.26:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Overture : Error during cleaning
:mozilla.27:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Overture : Error during cleaning
:mozilla.28:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.29:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.30:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.31:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.32:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Doubleclick : Error during cleaning
:mozilla.35:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.36:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.37:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.38:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.39:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.40:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.41:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.42:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.43:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.44:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.45:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.46:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.47:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.48:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.49:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.50:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.52:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.55:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.56:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.57:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.58:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.59:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.60:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.61:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.62:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
-> : Error during cleaning
:mozilla.64:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.65:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.66:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.67:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.68:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.69:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.70:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.71:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.72:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.73:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.74:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.75:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.76:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.77:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.78:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.79:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.80:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.81:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.82:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.83:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.88:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Adserver : Error during cleaning
:mozilla.89:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Adserver : Error during cleaning
:mozilla.90:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Fastclick : Error during cleaning
:mozilla.91:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Fastclick : Error during cleaning
:mozilla.92:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Adserver : Error during cleaning
:mozilla.93:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Adserver : Error during cleaning
:mozilla.94:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Adserver : Error during cleaning
:mozilla.95:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Adserver : Error during cleaning
:mozilla.96:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Adserver : Error during cleaning
:mozilla.97:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Adserver : Error during cleaning
:mozilla.98:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Adserver : Error during cleaning
:mozilla.109:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitslink : Error during cleaning
:mozilla.110:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitslink : Error during cleaning
:mozilla.111:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitslink : Error during cleaning
:mozilla.112:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitslink : Error during cleaning
:mozilla.115:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Googleadservices : Error during cleaning
:mozilla.121:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Statcounter : Error during cleaning
:mozilla.122:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Statcounter : Error during cleaning
:mozilla.123:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Statcounter : Error during cleaning
:mozilla.124:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Statcounter : Error during cleaning
:mozilla.129:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Qksrv : Error during cleaning
:mozilla.130:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Qksrv : Error during cleaning
:mozilla.135:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.191:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Burstbeacon : Error during cleaning
:mozilla.233:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Coremetrics : Error during cleaning
:mozilla.243:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Trafficmp : Error during cleaning
:mozilla.244:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Trafficmp : Error during cleaning
:mozilla.245:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Trafficmp : Error during cleaning
:mozilla.246:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Trafficmp : Error during cleaning
:mozilla.247:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Tribalfusion : Error during cleaning
:mozilla.259:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.260:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.261:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.262:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.263:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.264:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.265:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.266:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.267:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.268:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.273:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Valueclick : Error during cleaning
:mozilla.274:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Valueclick : Error during cleaning
:mozilla.279:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Valueclick : Error during cleaning
:mozilla.296:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Targetnet : Error during cleaning
:mozilla.304:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sexlist : Error during cleaning
:mozilla.306:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sexlist : Error during cleaning
:mozilla.307:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sexlist : Error during cleaning
:mozilla.308:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sexlist : Error during cleaning
:mozilla.309:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Webtrendslive : Error during cleaning
:mozilla.310:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Webtrendslive : Error during cleaning
:mozilla.311:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Webtrendslive : Error during cleaning
:mozilla.312:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Webtrendslive : Error during cleaning
:mozilla.313:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Webtrendslive : Error during cleaning
:mozilla.314:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Webtrendslive : Error during cleaning
:mozilla.315:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Webtrendslive : Error during cleaning
:mozilla.316:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Webtrendslive : Error during cleaning
:mozilla.330:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Serving-sys : Error during cleaning
:mozilla.331:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Serving-sys : Error during cleaning
:mozilla.332:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Serving-sys : Error during cleaning
:mozilla.333:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Serving-sys : Error during cleaning
:mozilla.334:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Liveperson : Error during cleaning
:mozilla.337:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Specificclick : Error during cleaning
:mozilla.344:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Overture : Error during cleaning
:mozilla.361:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Paycounter : Error during cleaning
:mozilla.362:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.370:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Questionmarket : Error during cleaning
:mozilla.405:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Mediaplex : Error during cleaning
:mozilla.408:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sitestat : Error during cleaning
:mozilla.414:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.422:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.439:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Masterstats : Error during cleaning
:mozilla.463:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sitestat : Error during cleaning
:mozilla.464:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sitestat : Error during cleaning
:mozilla.465:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sexcounter : Error during cleaning
:mozilla.466:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sexcounter : Error during cleaning
:mozilla.467:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sexcounter : Error during cleaning
:mozilla.468:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sexcounter : Error during cleaning
:mozilla.469:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sexcounter : Error during cleaning
:mozilla.470:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Sexcounter : Error during cleaning
:mozilla.474:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.491:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.497:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.498:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.499:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Pointroll : Error during cleaning
:mozilla.500:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Pointroll : Error during cleaning
:mozilla.501:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Pointroll : Error during cleaning
:mozilla.502:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Pointroll : Error during cleaning
:mozilla.505:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.509:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Gator : Error during cleaning
:mozilla.510:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Gator : Error during cleaning
:mozilla.511:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Gator : Error during cleaning
:mozilla.520:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.521:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.523:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.529:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Burstnet : Error during cleaning
:mozilla.535:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Webtrendslive : Error during cleaning
:mozilla.545:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.549:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Centrport : Error during cleaning
:mozilla.550:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Centrport : Error during cleaning
:mozilla.558:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.561:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.563:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Coremetrics : Error during cleaning
:mozilla.564:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.565:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Falkag : Error during cleaning
:mozilla.567:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.569:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Esomniture : Error during cleaning
:mozilla.570:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Ru4 : Error during cleaning
:mozilla.577:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Adition : Error during cleaning
:mozilla.578:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.586:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Com : Error during cleaning
:mozilla.587:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Com : Error during cleaning
:mozilla.588:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Com : Error during cleaning
:mozilla.589:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Casalemedia : Error during cleaning
:mozilla.590:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Casalemedia : Error during cleaning
:mozilla.591:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Casalemedia : Error during cleaning
:mozilla.592:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Casalemedia : Error during cleaning
:mozilla.593:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Serving-sys : Error during cleaning
:mozilla.598:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.599:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.600:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.602:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Bluestreak : Error during cleaning
:mozilla.603:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Euniverseads : Error during cleaning
:mozilla.604:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Euniverseads : Error during cleaning
:mozilla.610:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.611:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.612:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.613:C:\Program Files\Support.com\backup\Co\cookies.txt\73335_5eb8688c5_/cookies.txt -> Spyware.Cookie.247realmedia : Error during cleaning
:mozilla.6:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Atdmt : Error during cleaning
:mozilla.27:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Overture : Error during cleaning
:mozilla.28:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Overture : Error during cleaning
:mozilla.29:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.30:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.31:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.32:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Hitbox : Error during cleaning
:mozilla.33:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Doubleclick : Error during cleaning
:mozilla.39:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.40:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.41:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.42:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.43:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.44:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.45:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.46:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.47:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.48:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.49:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.50:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.51:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.52:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.53:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.54:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.56:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.59:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.60:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.61:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.62:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.63:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.64:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.65:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.66:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.67:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.68:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.69:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.70:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.71:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.72:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.73:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.74:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.75:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.76:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.77:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.2o7 : Error during cleaning
:mozilla.78:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.79:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.80:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.81:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.82:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.83:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.84:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.85:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.86:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.87:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during cleaning
:mozilla.88:C:\Program Files\Support.com\backup\Co\cookies.txt\74638_501523e68_/cookies.txt -> Spyware.Cookie.Advertising : Error during

[Crustyoldbloke]

Hello again James

Post back a fresh HijackThis log (from normal mode) and I will take another look. (2 logs in total).

I just got one, the Ewido log. Can I see a HJT log also please?

[j.mccarter]

Here you go...


Logfile of HijackThis v1.99.1
Scan saved at 5:59:43 PM, on 11/22/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microangelo\muamgr.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
c:\program files\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\WINDOWS\system32\netdde.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LMPDPSRV.EXE
C:\Program Files\Lexmark X125\LEX125SU.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\tlntsvr.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Messenger\msmsgs.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.comcast.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 194.242.130.2:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~2\COMCAS~1.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MOD] C:\Program Files\Microangelo\muamgr.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [LMPDPSRV] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LMPDPSRV.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lexmark X125 Settings Utility.lnk = C:\Program Files\Lexmark X125\LEX125SU.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI01DA~1\Office10\EXCEL.EXE/3000
O9 - Extra button: Help - {327BBB14-259E-44FC-BB41-D8ACAE98D40D} - http://www.comcast.net/memberservices/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {2871FC9B-5E34-4AAE-9E9C-EBD1652D5C92} (Rhapsody Player Engine) - http://forms.real.co...ne_Inst_Win.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} - http://tools.ebayimg...ol_v1-0-3-9.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...96/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1123577022940
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://gamesoduser.c...es/ExentCtl.ocx
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,26/mcgdmgr.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.c...ers/play365.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.app.../ITDetector.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - https://support.myho...oad/XUpload.ocx
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredim...er/imloader.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.ao.../ampx_en_dl.cab
O20 - Winlogon Notify: Nls - C:\WINDOWS\
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe

[Crustyoldbloke]

Hello again James

Your HJT log shows two unusual items; the proxy server I asked for your knowledge of in my first post and an incomplete Windows logon instruction.

Since you don't know of the proxy server's admin address, let's try taking both of these entries out. If afterwards you find that you can't get on to the internet, please go to HJT folder and reverse the last fix, which is this one you're about to do. On opening HJT you will see a box marked View the list of backups - click that, a window will open and you'll see a list, highlight the one/s you want and and clcik restore

I mentioned two items, please do the R1 entry first, fix checked and reboot. If all is OK, then do the 020 entry.

Rescan with HijackThis. Close all programmes leaving only HijackThis running. Place a checkmark or tick against the following:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 194.242.130.2:80
O20 - Winlogon Notify: Nls - C:\WINDOWS\

Click on Fix Checked when finished and exit HijackThis.

Let me know how it went and how the PC is running now.

[j.mccarter]

Hello again and good morning!

I followed your instructions this morning and so far so good.....

I am going to keep an eye out for the pop-ups today...if I see any (or if I don't) I will let you know this evening.

Here is my latest HJT log.....if there are any more steps you suggest please let me know.

!THANK YOU! so much.........James

Logfile of HijackThis v1.99.1
Scan saved at 4:53:03 AM, on 11/23/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\netdde.exe
C:\Program Files\Microangelo\muamgr.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LMPDPSRV.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Program Files\Lexmark X125\LEX125SU.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\svchost.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.comcast.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~2\COMCAS~1.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MOD] C:\Program Files\Microangelo\muamgr.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [LMPDPSRV] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LMPDPSRV.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lexmark X125 Settings Utility.lnk = C:\Program Files\Lexmark X125\LEX125SU.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI01DA~1\Office10\EXCEL.EXE/3000
O9 - Extra button: Help - {327BBB14-259E-44FC-BB41-D8ACAE98D40D} - http://www.comcast.net/memberservices/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {2871FC9B-5E34-4AAE-9E9C-EBD1652D5C92} (Rhapsody Player Engine) - http://forms.real.co...ne_Inst_Win.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} - http://tools.ebayimg...ol_v1-0-3-9.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...96/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1123577022940
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://gamesoduser.c...es/ExentCtl.ocx
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,26/mcgdmgr.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.c...ers/play365.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.app.../ITDetector.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - https://support.myho...oad/XUpload.ocx
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredim...er/imloader.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.ao.../ampx_en_dl.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe

[j.mccarter]

Hello again....just wanted to let you know that I am still getting the pop-ups...

The seem to have changed their rate of apperance (less frequently but several at a time now) although that may very well just be my imagination.

I will be celebrating the Thanksgiving holiday so I will be away until Friday, but I will be sure to check back ASAP...

Once again thank you for all of your help...I truly appreciate it.

James

[Crustyoldbloke]

Hello again James

Looks like we must do some digging since there are no infections showing in your HJT log.

Let's start with a specific rootkit, which I don't think you have, and if that is negative, we'll look for suspicious RK files.

You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download AproposFix from here:AproposFix
Save it to your desktop but do NOT run it yet.

Then please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

Once in Safe Mode, please double-click aproposfix.exe and unzip it to the desktop. Open the aproposfix folder on your desktop and run RunThis.bat. Follow the prompts.

When the tool is finished, please reboot back into normal mode.

If that was negative, please continue.

Download:
RKFiles.zip

Create a new folder called C:\Antispyware\RKFiles

Extract the contents of RKFiles.zip into this new RKFiles folder.

Please now reboot into safe mode. Here's how:

Restart your computer and as soon as it starts booting up again continuously tap the F8 key. A menu should appear where you will be given the option to enter Safe Mode.

Open the C:\Antispyware\RKFiles folder * Locate and double-click the RKFILES.BAT to run this tool.
* Sit back and wait until it has finished.
* When it is finally finished a text file will open.
* Save the contents of that text file.

N.B.: It should save by default to C:\Log.txt

Reboot back to Normal Mode.

Post a new HijackThis log, along with the entire contents of the log.txt file in the aproposfix folder, and the RK Log.txt.

[j.mccarter]

Hello again OCB....sorry for the delay but I had family and holidays to deal with....here is my latest HJT log.


Logfile of HijackThis v1.99.1
Scan saved at 4:22:24 PM, on 11/28/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\netdde.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
c:\PROGRA~1\mcafee.com\vso\OasClnt.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
c:\program files\mcafee.com\vso\mcvsshld.exe
C:\WINDOWS\system32\nvsvc32.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microangelo\muamgr.exe
c:\program files\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Lexmark X125\LEX125SU.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.comcast.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~2\COMCAS~1.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\PROGRA~1\COMCAS~2\COMCAS~1.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MOD] C:\Program Files\Microangelo\muamgr.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lexmark X125 Settings Utility.lnk = C:\Program Files\Lexmark X125\LEX125SU.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI01DA~1\Office10\EXCEL.EXE/3000
O9 - Extra button: Help - {327BBB14-259E-44FC-BB41-D8ACAE98D40D} - http://www.comcast.net/memberservices/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {2871FC9B-5E34-4AAE-9E9C-EBD1652D5C92} (Rhapsody Player Engine) - http://forms.real.co...ne_Inst_Win.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} - http://tools.ebayimg...ol_v1-0-3-9.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcaf...96/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1123577022940
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://gamesoduser.c...es/ExentCtl.ocx
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcaf...,26/mcgdmgr.cab
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.c...ers/play365.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.app.../ITDetector.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - https://support.myho...oad/XUpload.ocx
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredim...er/imloader.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.ao.../ampx_en_dl.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe

[j.mccarter]

and here are the other log files as requested...

Log of AproposFix v1

************

Running from directory:
C:\Documents and Settings\James\Desktop\aproposfix

************

Registry entries found:

[HKEY_LOCAL_MACHINE\Software\CuigmAx9YN2m]
@="nFJH4LJUVVUVVWVxFOJLIPUVVUkXV0qvlw0 VMSMN8GbaV7LCP8LMVM6MZLPRRWMSM"
"Device"="\\\\.\\Pluprov"
"DriverPath"="C:\\WINDOWS\\system32\\drivers\\scs1rvxx.sys"
"DriverName"="Flpnarp"
"HideUninstallerName"="C:\\Program Files\\Ewiespn\\edleqchk.exe"
"HDll"="C:\\WINDOWS\\system32\\oskevmgr.dll"
"ServerAddress"="adchannel.contextplus.net"
"LegalNote"="http://adchannel.con...onbranded.html"
"PartnerId"="CP.LAV"
"InstallationId"="{X497d7d1-4622-0e4f-1d92-fde3413c1432}"
"PageFiltering"=dword:00000001
"ClientName"="C:\\Program Files\\Ewiespn\\ncxsctfp.exe"
"AutoUpdater"="C:\\WINDOWS\\system32\\remptext.exe"
"Version"="2.0.131"
"LastAURestoreMsgTS"="2005:10:20-20:29:24:767"

************

Removing hidden service:
Service Flpnarp removed.

Removing hidden folder:
Deletion of folder Ewiespn succeeded!

Deleting files:

Deletion of file C:\WINDOWS\system32\drivers\scs1rvxx.sys succeeded!
Deletion of file C:\WINDOWS\system32\remptext.exe succeeded!
Deletion of file C:\WINDOWS\system32\oskevmgr.dll succeeded!

Backing up files:
Done!

Removing registry entries:

REGEDIT4

[-HKEY_CURRENT_USER\Software\CuigmAx9YN2m]
[-HKEY_LOCAL_MACHINE\Software\CuigmAx9YN2m]

Done!

Finished!

.........................................and finally.......................................

C:\Antispyware\RKFiles

PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
Files Found in system Folder............
------------------------
C:\WINDOWS\system32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213
C:\WINDOWS\system32\DivX.dll: PEC2

Files Found in all users startup Folder............
------------------------
Files Found in all users windows Folder............
------------------------
Finished
bye

Edited by j.mccarter, 28 November 2005 - 03:27 PM.

[Crustyoldbloke]

Hello again

Well that looks really good.

How is the PC now?

[j.mccarter]

Hey COB,

So far so good! I have been running for a few hours now with no apparent issues.....which is def. something new!)

I will keep an eye on it until Tuesday and give you an update.....Thanks So Much!

James

[Crustyoldbloke]

Congratulations! your new log is clean. Just a little bit more to do to prevent further infection.

Reset and Re-enable your System Restore to remove bad files that have been backed up by Windows. The files in System Restore are protected to prevent any programmes changing them. This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected.)

To reset your restore points, please note that you will need to log into your computer with an account which has full administrator access. You will know if the account has administrator access because you will be able to see the System Restore tab. If the tab is missing, you are logged in under a limited account.

(Windows XP)
1. Turn off System Restore.On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
2. Reboot.

3. Turn ON System Restore.On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.
I recommend going to the following link and update as recommended by Microsoft. This adds more security and extra features including a pop-up blocker for Internet Explorer. Microsoft Update

Now that everything is fixed, I suggest that you consider getting these programmes to help keep the computer clean:

SPYWARE BLASTER - Blocks bad ActiveX items from installing on your computer.
AD-AWARE PERSONAL – A fine free malware detector and removal programme
SPYBOT S&D – Excellent free spyware detector and removal programme
GOOGLE TOOLBAR - Blocks many unwanted pop-ups in Internet Explorer.
FIREFOX - Safer alternative to the Internet Explorer web browser.
AVG ANTIVIRUS FREE EDITION - Free antivirus programme if you currently are not using one.
ZONEALARM - Free firewall programme if you currently are not using one (Windows XP has a built-in firewall).

Remember to update these frequently.

Please note that whilst there is nothing wrong in having more than one antispyware programmes for “on demand” scanning, having two or more antivirus systems is not recommended as they may well interfere with each other.

You may also want to read "How did I get infected in the first place" to learn how to better secure your computer.

Be sure to keep your Windows, antispyware and antivirus updated.

I think we got it James. It had to be a rootkit infection. Happy safe surfing!

[j.mccarter]

Hey COB,

Thank you! Thank you! Thank you! Thank you! Thank you! Thank you! Thank you! Thank you!

I am running on day two of no problems or pop-ups!

I get paid monthly but I will be sure to drop you a donation as soon as pay day arrives...

Once again......

Thank you! Thank you! Thank you! Thank you! Thank you! Thank you! Thank you! Thank you!

James