PDA

View Full Version : Windows profile deleted after Spybot run!!!


bruce_w_98
2007-06-12, 15:39
Good day. I have a serious problem and need some serious help. I have been using Spybot for a long time and this is the first time this has happened. I did a scan on my machine and found over 70 issues that needed to be cleaned. When I asked Spybot to remove them, they were all removed successfully, but then the machine frooze. I did a restart and then I could not access windows with my usual login.
I booted with a live cd and was able to restore to a previous day but this did not bring back my user profile.

I had an another user account that I used to log in and then I tried to undo the last scan that spybot did. I realized after that that the name of the profile reappeared in the documents and settings folder, but it was still empty.

I also tried many data recovery tools and still was unable to recover anything.

This profile is very important to the company because it contained accounting records and now its gone.

Is there anything I can do? Does safer networking have a tool that can recover anything deleted by spybot???

Help
bruce_w_98
2007-06-13, 05:39
Please someone help if you can.
chi-va
2007-06-13, 15:27
Hello,

I hope that we can help you. Have you already tried "PC Inspector File Recovery"?

If yes, which other tools have you tried?

The problem was probably the reboot. Can you paste us the log files? The format of the files are "Checks" or "Fixes""Year""Month""Date"-"Time".txt. You should find them here:

* Windows 95 or 98: C:\Windows\Aplication Data\Spybot - Search & Destroy\Logs
* Windows ME: C:\Windows\All Users\Application Data\Spybot - Search & Destroy\Logs
* Windows NT, 2000 or XP: C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs

(Please note that the Application Data Folder is hidden. So if you can't find this folder please check your folder properties)

We need the log files with the mentioned 70 issues.
bruce_w_98
2007-06-13, 21:50
I have used R-Studio and OO-Unerase and GetBackData. Nothing seems to identify the lost profile or the files under the profile.

Here are the logs:

Fixes.070608-1702
--- Report generated: 2007-06-08 17:02 ---

MyWay.MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{3E720451-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{3E720453-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.HTMLPanel

MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.HTMLPanel.1

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.PseudoTransparentPlugin

MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.PseudoTransparentPlugin.1

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Settings (Registry key, fixed)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.ToolbarPlugin

MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.ToolbarPlugin.1

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

MyWay.MyWebSearch: Autorun settings (MyWebSearch Email Plugin) (Registry value, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

MyWay.MyWebSearch: Autorun settings (MyWebSearch Email Plugin) (Registry value, fixed)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

MyWay.MyWebSearch: Browser helper object (Registry key, fixed)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\MyWebSearch

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{07B18EA3-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.OutlookAddin

MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.OutlookAddin.1

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.SettingsPlugin

MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.SettingsPlugin.1

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\ScreenSaverControl.ScreenSaverInstaller

MyWay.MyWebSearch: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\ScreenSaverControl.ScreenSaverInstaller.1

MyWay.MyWebSearch: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

MyWay.MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}

MyWay.MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}

MyWay.MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}

MyWay.MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}

MyWay.MyWebSearch: Browser helper object (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\FocusInteractive

MyWay.MyWebSearch: Settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}

MyWay.MyWebSearch: Settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin

MyWay.MyWebSearch: Settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin

MyWay.MyWebSearch: Settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}

MyWay.MyWebSearch: Uninstall settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall

MyWay.MyWebSearch: Settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\MyWebSearch

MyWay.MyWebSearch: Program directory (Directory, fixed)
C:\Program Files\MyWebSearch\

MyWay.MyWebSearch: Link (File, fixed)
C:\Documents and Settings\Nicole\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk

MyWay.MyWebSearch: Link (File, fixed)
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk

MyWay.MyWebSearch: Browser helper object (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

FunWebProducts: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}

FunWebProducts: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{1F52A5FA-A705-4415-B975-88503B291728}

FunWebProducts: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}

FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}

FunWebProducts: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}

FunWebProducts: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}

FunWebProducts: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}

FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}

FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

FunWebProducts: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

FunWebProducts: Settings (Registry value, fixed)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Internet Explorer\URLSearchHooks\{00A6FAF6-072E-44cf-8957-5838F569A31D}

FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistoryKillerScheduler

FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistoryKillerScheduler.1

FunWebProducts: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistorySwatterControlBar

FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistorySwatterControlBar.1

FunWebProducts: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.IECookiesManager

FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.IECookiesManager.1

FunWebProducts: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.KillerObjManager

FunWebProducts: Root class (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.KillerObjManager.1

FunWebProducts: Class ID (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

Microsoft.WindowsSecurityCenter.AntiVirusDisableNotify: Settings (Registry change, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0

Microsoft.WindowsSecurityCenter_disabled: Settings (Registry change, fixed)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Start!=W=2

FakeMSN8Beta: User settings (Registry value, fixed)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Windows NT\CurrentVersion\Windows\run=...C:\WINDOWS\system32\*\csrss.exe...

FakeMSN8Beta: User settings (Registry value, fixed)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Windows NT\CurrentVersion\Windows\load=...C:\WINDOWS\system32\*\csrss.exe...

FakeMSN8Beta: Executable (File, fixed)
C:\WINDOWS\system32\netstat.com

FakeMSN8Beta: Executable (File, fixed)
C:\WINDOWS\system32\taskkill.com

MyWebSearch: Class ID (Registry key, fixed)
HKEY_CLASSES_ROOT\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{120927BF-1700-43BC-810F-FAB92549B390}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{991AAC62-B100-47CE-8B75-253965244F69}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}

MyWebSearch: Interface (Registry key, fixed)
HKEY_CLASSES_ROOT\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}

MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}

MyWebSearch: Type library (Registry key, fixed)
HKEY_CLASSES_ROOT\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}

MyWebSearch: Settings (Registry value, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\sources\f3PopularScreensavers

DoubleClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


Mediaplex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


CasaleMedia: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


AdRevolver: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


FastClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


Statcounter: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


Zedo: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


MediaPlex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


MediaPlex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


TagASaurus: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


Avenue A, Inc.: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


Tradedoubler: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


CoreMetrics: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


ReliableStats: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


MediaPlex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


Advertising.com: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


Clickbank: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


LinkSynergy: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


BFast: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


CurePCSolution: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


Winsoftware.WinAntiVirusPro2006: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


BlueStreak: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


Zedo: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


AdRevolver: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


CasaleMedia: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitsLink: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


Advertising.com: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


DoubleClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


FastClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


AdRevolver: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


LinkSynergy: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitsLink: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


FastClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


Avenue A, Inc.: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


Statcounter: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)


TagASaurus: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, fixed)
bruce_w_98
2007-06-13, 21:52
--- Report generated: 2007-06-08 17:00 ---

MyWay.MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{3E720451-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{3E720453-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.HTMLPanel

MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.HTMLPanel.1

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.PseudoTransparentPlugin

MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.PseudoTransparentPlugin.1

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.ToolbarPlugin

MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.ToolbarPlugin.1

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

MyWay.MyWebSearch: Autorun settings (MyWebSearch Email Plugin) (Registry value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

MyWay.MyWebSearch: Autorun settings (MyWebSearch Email Plugin) (Registry value, nothing done)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin

MyWay.MyWebSearch: Browser helper object (Registry key, nothing done)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\MyWebSearch

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EA3-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.OutlookAddin

MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearch.OutlookAddin.1

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.SettingsPlugin

MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\MyWebSearchToolBar.SettingsPlugin.1

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\ScreenSaverControl.ScreenSaverInstaller

MyWay.MyWebSearch: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\ScreenSaverControl.ScreenSaverInstaller.1

MyWay.MyWebSearch: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}

MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}

MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}

MyWay.MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}

MyWay.MyWebSearch: Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\FocusInteractive

MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}

MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin

MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin

MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}

MyWay.MyWebSearch: Uninstall settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall

MyWay.MyWebSearch: Settings (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\MyWebSearch

MyWay.MyWebSearch: Program directory (Directory, nothing done)
C:\Program Files\MyWebSearch\

MyWay.MyWebSearch: Link (File, nothing done)
C:\Documents and Settings\Nicole\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk

MyWay.MyWebSearch: Link (File, nothing done)
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MyWebSearch Email Plugin.lnk

MyWay.MyWebSearch: Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

FunWebProducts: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}

FunWebProducts: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{1F52A5FA-A705-4415-B975-88503B291728}

FunWebProducts: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}

FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}

FunWebProducts: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}

FunWebProducts: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}

FunWebProducts: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}

FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}

FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

FunWebProducts: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

FunWebProducts: Settings (Registry value, nothing done)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Internet Explorer\URLSearchHooks\{00A6FAF6-072E-44cf-8957-5838F569A31D}

FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistoryKillerScheduler

FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistoryKillerScheduler.1

FunWebProducts: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistorySwatterControlBar

FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.HistorySwatterControlBar.1

FunWebProducts: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.IECookiesManager

FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.IECookiesManager.1

FunWebProducts: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.KillerObjManager

FunWebProducts: Root class (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\FunWebProducts.KillerObjManager.1

FunWebProducts: Class ID (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

Microsoft.WindowsSecurityCenter.AntiVirusDisableNotify: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0

Microsoft.WindowsSecurityCenter_disabled: Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Start!=W=2

FakeMSN8Beta: User settings (Registry value, nothing done)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Windows NT\CurrentVersion\Windows\run=...C:\WINDOWS\system32\*\csrss.exe...

FakeMSN8Beta: User settings (Registry value, nothing done)
HKEY_USERS\S-1-5-21-2474628421-1161644859-1682972224-1142\Software\Microsoft\Windows NT\CurrentVersion\Windows\load=...C:\WINDOWS\system32\*\csrss.exe...

FakeMSN8Beta: Executable (File, nothing done)
C:\WINDOWS\system32\netstat.com

FakeMSN8Beta: Executable (File, nothing done)
C:\WINDOWS\system32\taskkill.com

MyWebSearch: Class ID (Registry key, nothing done)
HKEY_CLASSES_ROOT\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{120927BF-1700-43BC-810F-FAB92549B390}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{991AAC62-B100-47CE-8B75-253965244F69}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}

MyWebSearch: Interface (Registry key, nothing done)
HKEY_CLASSES_ROOT\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}

MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}

MyWebSearch: Type library (Registry key, nothing done)
HKEY_CLASSES_ROOT\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}

MyWebSearch: Settings (Registry value, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\sources\f3PopularScreensavers

DoubleClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


Mediaplex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


CasaleMedia: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


AdRevolver: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


FastClick: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


Statcounter: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


Zedo: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


MediaPlex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


MediaPlex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


TagASaurus: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


Avenue A, Inc.: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


Tradedoubler: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


CoreMetrics: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


ReliableStats: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


MediaPlex: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


Advertising.com: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


Clickbank: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


LinkSynergy: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


BFast: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


CurePCSolution: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


Winsoftware.WinAntiVirusPro2006: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


BlueStreak: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


Zedo: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


HitBox: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)


WebTrends live: Tracking cookie (Internet Explorer: nicole_brown) (Cookie, nothing done)
chi-va
2007-06-13, 23:59
Hi,

I couldn't find any hints in your reports that indicate that Spybot-S&D has deleted the complete profile. It could probably be a damaged file system. Please try the freeware "PC INSPECTOR™ File Recovery 4.x". It normally has a very good result in recovering lost data.

Here is the link:
www.pcinspector.de/file_recovery/uk/welcome.htm

Please scan the whole "C:\Documents and Settings\" folder
bruce_w_98
2007-06-14, 20:58
Still didnt work. It's like it never existed.
chi-va
2007-06-15, 14:08
Hello,

It is nearly impossible that the recovery tools haven't found anything, except there is something that you haven't told us yet.

Do you use any data eraser tools? If yes, do you have set any automations? E.g. automatically erase unused space?

Do you already have tried "chkdsk"? Are there any discrepancies in disk space in the folder "C:\Documents and Settings\"?

By the way, FakeMSN8Beta has to be removed. If you don't trust Spybot-S&D anymore, you should at least try Antivir:
http://www.free-av.com/

This worm is able to corrupt your Windows system tools, e.g. "Regedit" and "Taskmanager".

We are sorry! It seems that we cannot help you without any data backups.