View Full Version : Windows profile deleted after Spybot run!!!
bruce_w_98
2007-06-12, 15:39
Good day. I have a serious problem and need some serious help. I have been using Spybot for a long time and this is the first time this has happened. I did a scan on my machine and found over 70 issues that needed to be cleaned. When I asked Spybot to remove them, they were all removed successfully, but then the machine frooze. I did a restart and then I could not access windows with my usual login.
I booted with a live cd and was able to restore to a previous day but this did not bring back my user profile.
I had an another user account that I used to log in and then I tried to undo the last scan that spybot did. I realized after that that the name of the profile reappeared in the documents and settings folder, but it was still empty.
I also tried many data recovery tools and still was unable to recover anything.
This profile is very important to the company because it contained accounting records and now its gone.
Is there anything I can do? Does safer networking have a tool that can recover anything deleted by spybot???
Help
bruce_w_98
2007-06-13, 05:39
Please someone help if you can.
Hello,
I hope that we can help you. Have you already tried "PC Inspector File Recovery"?
If yes, which other tools have you tried?
The problem was probably the reboot. Can you paste us the log files? The format of the files are "Checks" or "Fixes""Year""Month""Date"-"Time".txt. You should find them here:
* Windows 95 or 98: C:\Windows\Aplication Data\Spybot - Search & Destroy\Logs
* Windows ME: C:\Windows\All Users\Application Data\Spybot - Search & Destroy\Logs
* Windows NT, 2000 or XP: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs
(Please note that the Application Data Folder is hidden. So if you can't find this folder please check your folder properties)
We need the log files with the mentioned 70 issues.
bruce_w_98
2007-06-13, 21:50
I have used R-Studio and OO-Unerase and GetBackData. Nothing seems to identify the lost profile or the files under the profile.
Here are the logs:
Fixes.070608-1702
--- Report generated: 2007-06-08 17:02 ---
MyWay.MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{3E720451-B472-4954-B7AA-33069EB53906}
MyWay.MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.HTMLPanel
MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.HTMLPanel.1
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}
MyWay.MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.PseudoTransparentPlugin
MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.PseudoTransparentPlugin.1
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Settings (Registry key, fixed)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.ToolbarPlugin
MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.ToolbarPlugin.1
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
MyWay.MyWebSearch: Autorun settings (MyWebSearch Email Plugin) (Registry value, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin
MyWay.MyWebSearch: Autorun settings (MyWebSearch Email Plugin) (Registry value, fixed)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin
MyWay.MyWebSearch: Browser helper object (Registry key, fixed)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\MyWebSearch
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{07B18EA3-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.OutlookAddin
MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.OutlookAddin.1
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.SettingsPlugin
MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.SettingsPlugin.1
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\ScreenSaverControl.ScreenSaverInstaller
MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\ScreenSaverControl.ScreenSaverInstaller.1
MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
MyWay.MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}
MyWay.MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}
MyWay.MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}
MyWay.MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}
MyWay.MyWebSearch: Browser helper object (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\FocusInteractive
MyWay.MyWebSearch: Settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
MyWay.MyWebSearch: Settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin
MyWay.MyWebSearch: Settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin
MyWay.MyWebSearch: Settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}
MyWay.MyWebSearch: Uninstall settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
MyWay.MyWebSearch: Settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\MyWebSearch
MyWay.MyWebSearch: Program directory (Directory, fixed)
C:\Program Files\MyWebSearch\
MyWay.MyWebSearch: Link (File, fixed)
C:\Documents and Settings\Nicole\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk
MyWay.MyWebSearch: Link (File, fixed)
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk
MyWay.MyWebSearch: Browser helper object (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4D7B-9389-0F166788785A}
FunWebProducts: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
FunWebProducts: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{1F52A5FA-A705-4415-B975-88503B291728}
FunWebProducts: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}
FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}
FunWebProducts: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}
FunWebProducts: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
FunWebProducts: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}
FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}
FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
FunWebProducts: Settings (Registry value, fixed)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Internet Explorer\URLSearchHooks\{00A6FAF6-072E-44cf-8957-5838F569A31D}
FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistoryKillerScheduler
FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistoryKillerScheduler.1
FunWebProducts: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistorySwatterControlBar
FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistorySwatterControlBar.1
FunWebProducts: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.IECookiesManager
FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.IECookiesManager.1
FunWebProducts: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.KillerObjManager
FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.KillerObjManager.1
FunWebProducts: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
Microsoft.WindowsSecurityCenter.AntiVirusDisableNotify: Settings (Registry change, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0
Microsoft.WindowsSecurityCenter_disabled: Settings (Registry change, fixed)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Start!=W=2
FakeMSN8Beta: User settings (Registry value, fixed)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Windows NT\CurrentVersion\Windows\run=...C:\WINDOWS\system32\*\csrss.exe...
FakeMSN8Beta: User settings (Registry value, fixed)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Windows NT\CurrentVersion\Windows\load=...C:\WINDOWS\system32\*\csrss.exe...
FakeMSN8Beta: Executable (File, fixed)
C:\WINDOWS\system32\netstat.com
FakeMSN8Beta: Executable (File, fixed)
C:\WINDOWS\system32\taskkill.com
MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{120927BF-1700-43BC-810F-FAB92549B390}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{991AAC62-B100-47CE-8B75-253965244F69}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}
MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}
MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}
MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}
MyWebSearch: Settings (Registry value, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\sources\f3PopularScreensavers
DoubleClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
Mediaplex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
CasaleMedia: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
AdRevolver: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
FastClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
Statcounter: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
Zedo: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
MediaPlex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
MediaPlex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
TagASaurus: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
Avenue A, Inc.: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
Tradedoubler: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
CoreMetrics: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
ReliableStats: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
MediaPlex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
Advertising.com: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
Clickbank: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
LinkSynergy: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
BFast: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
CurePCSolution: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
Winsoftware.WinAntiVirusPro2006: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
BlueStreak: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
Zedo: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
AdRevolver: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
CasaleMedia: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitsLink: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
Advertising.com: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
DoubleClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
FastClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
AdRevolver: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
LinkSynergy: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitsLink: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
FastClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
Avenue A, Inc.: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
Statcounter: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
TagASaurus: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
bruce_w_98
2007-06-13, 21:52
--- Report generated: 2007-06-08 17:00 ---
MyWay.MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{3E720451-B472-4954-B7AA-33069EB53906}
MyWay.MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.HTMLPanel
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.HTMLPanel.1
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}
MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.PseudoTransparentPlugin
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.PseudoTransparentPlugin.1
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.ToolbarPlugin
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.ToolbarPlugin.1
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
MyWay.MyWebSearch: Autorun settings (MyWebSearch Email Plugin) (Registry value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin
MyWay.MyWebSearch: Autorun settings (MyWebSearch Email Plugin) (Registry value, nothing done)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin
MyWay.MyWebSearch: Browser helper object (Registry key, nothing done)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\MyWebSearch
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EA3-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.OutlookAddin
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.OutlookAddin.1
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.SettingsPlugin
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.SettingsPlugin.1
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\ScreenSaverControl.ScreenSaverInstaller
MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\ScreenSaverControl.ScreenSaverInstaller.1
MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}
MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}
MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}
MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}
MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}
MyWay.MyWebSearch: Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\FocusInteractive
MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin
MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin
MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}
MyWay.MyWebSearch: Uninstall settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\MyWebSearch
MyWay.MyWebSearch: Program directory (Directory, nothing done)
C:\Program Files\MyWebSearch\
MyWay.MyWebSearch: Link (File, nothing done)
C:\Documents and Settings\Nicole\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk
MyWay.MyWebSearch: Link (File, nothing done)
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk
MyWay.MyWebSearch: Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4D7B-9389-0F166788785A}
FunWebProducts: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
FunWebProducts: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{1F52A5FA-A705-4415-B975-88503B291728}
FunWebProducts: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}
FunWebProducts: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}
FunWebProducts: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
FunWebProducts: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
FunWebProducts: Settings (Registry value, nothing done)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Internet Explorer\URLSearchHooks\{00A6FAF6-072E-44cf-8957-5838F569A31D}
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistoryKillerScheduler
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistoryKillerScheduler.1
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistorySwatterControlBar
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistorySwatterControlBar.1
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.IECookiesManager
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.IECookiesManager.1
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.KillerObjManager
FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.KillerObjManager.1
FunWebProducts: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
Microsoft.WindowsSecurityCenter.AntiVirusDisableNotify: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0
Microsoft.WindowsSecurityCenter_disabled: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Start!=W=2
FakeMSN8Beta: User settings (Registry value, nothing done)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Windows NT\CurrentVersion\Windows\run=...C:\WINDOWS\system32\*\csrss.exe...
FakeMSN8Beta: User settings (Registry value, nothing done)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Windows NT\CurrentVersion\Windows\load=...C:\WINDOWS\system32\*\csrss.exe...
FakeMSN8Beta: Executable (File, nothing done)
C:\WINDOWS\system32\netstat.com
FakeMSN8Beta: Executable (File, nothing done)
C:\WINDOWS\system32\taskkill.com
MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{120927BF-1700-43BC-810F-FAB92549B390}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{991AAC62-B100-47CE-8B75-253965244F69}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}
MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}
MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}
MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}
MyWebSearch: Settings (Registry value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\sources\f3PopularScreensavers
DoubleClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
Mediaplex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
CasaleMedia: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
AdRevolver: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
FastClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
Statcounter: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
Zedo: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
MediaPlex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
MediaPlex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
TagASaurus: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
Avenue A, Inc.: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
Tradedoubler: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
CoreMetrics: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
ReliableStats: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
MediaPlex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
Advertising.com: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
Clickbank: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
LinkSynergy: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
BFast: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
CurePCSolution: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
Winsoftware.WinAntiVirusPro2006: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
BlueStreak: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
Zedo: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
Hi,
I couldn't find any hints in your reports that indicate that Spybot-S&D has deleted the complete profile. It could probably be a damaged file system. Please try the freeware "PC INSPECTOR™ File Recovery 4.x". It normally has a very good result in recovering lost data.
Here is the link:
www.pcinspector.de/file_recovery/uk/welcome.htm
Please scan the whole "C:\Documents and Settings\" folder
bruce_w_98
2007-06-14, 20:58
Still didnt work. It's like it never existed.
Hello,
It is nearly impossible that the recovery tools haven't found anything, except there is something that you haven't told us yet.
Do you use any data eraser tools? If yes, do you have set any automations? E.g. automatically erase unused space?
Do you already have tried "chkdsk"? Are there any discrepancies in disk space in the folder "C:\Documents and Settings\"?
By the way, FakeMSN8Beta has to be removed. If you don't trust Spybot-S&D anymore, you should at least try Antivir:
http://www.free-av.com/
This worm is able to corrupt your Windows system tools, e.g. "Regedit" and "Taskmanager".
We are sorry! It seems that we cannot help you without any data backups.