PDA

View Full Version : Help cmd and other issues



Ravier
2006-05-06, 23:50
I'm using Symantec, I've tried Norton, I've tried AGV, Adaware, and S&D. I just can't seem to get rid of the problem. It really feels like to much is running. I looked at another thread from these forms and I read about hijackthis so here's the log file.

Logfile of HijackThis v1.99.1
Scan saved at 5:43:00 PM, on 5/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\ipwins\ipwins.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Valve\Steam\Steam.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Winamp\wwinampa.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\wpabaln.exe
C:\DOCUME~1\Scotty\LOCALS~1\Temp\Rar$EX00.953\HijackThis.exe

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,mukrobd.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {72C3A257-5BE4-400C-8FDE-620E32AB2C24} - C:\Program Files\MSN\horejoru.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [sys0304602823-16] C:\WINDOWS\sys0304602823-16.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [kiqbdt] C:\WINDOWS\system32\kqmjev.exe reg_run
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\\Steam.exe -silent
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [gexcf] C:\WINDOWS\system32\kqmjev.exe reg_run
O4 - Startup: BitTorrent.lnk = C:\Program Files\BitTorrent\bittorrent.exe
O4 - Startup: Z_Start.lnk = C:\WINDOWS\system32\pmdsregs.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {B3872502-F9FD-4E96-93FF-0D37298F0689} (SOESysInfo Control) - http://everquest2.station.sony.com/systemscan/soesysinfo.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/en/check/qdiagh.cab?326
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

illukka
2006-05-07, 00:18
hi
Welcome,
Please follow the instructions provided, you may want to print out these instructions and use them as a reference.


Download Brute Force Uninstaller (http://www.merijn.org/files/bfu.zip) to your C:\
Unzip it to a folder of its own (C:\BFU). So BFU should be on your root. In most cases this is C:\
Download qoofix.bat (http://downloads.subratam.org/Lon/qooFix.bat) (rightclick on this link and choose save as)
Place qoofix.bat in your C:\BFU - folder. (Important!)
Doubleclick qooFix.bat, Close all browsers and explorer folders.
Choose option 1 (Qoolfix autofix) and follow the prompts.
Please be patient, it will take about five minutes.
After the PC has restarted:

Please download ewido anti malware (http://www.ewido.net/en/download/) it is a free version of the program.
Install ewido security suite
When installing, under "Additional Options" uncheck..
Install background guard
Install scan via context menu

Launch ewido, there should be an icon on your desktop, double-click it.
The program will now open to the main screen.
When you run ewido for the first time, you may get a warning "Database could not be found!". Click OK. We will fix this in a moment.

You will need to update ewido to the latest definition files.
On the left hand side of the main screen click update.
Then click on Start Update.

The update will start and a progress bar will show the updates being installed.
(the status bar at the bottom will display ("Update successful")
If you are having problems with the updater, you can use this link to manually update ewido.
ewido manual updates (http://www.ewido.net/en/download/updates/)

Once the updates are installed do the following:

reboot your computer in SafeMode by doing the following:
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
Instead of Windows loading as normal, a menu should appear
Select the first option, to run Windows in Safe Mode.


then launch ewido:

Click on scanner
Click on Complete System Scan and the scan will begin.
You will be prompted to clean the first infection.
Select "Perform action on all infections", then proceed.
Once the scan has completed, there will be a button located on the bottom of the screen named Save report
Click Save report.
Save the report .txt file to your desktop or a location where you can find it easily.

Close ewido anti malware.

reboot back to normal mode, post the ewido report and a log from a fresh hjt scan

Ravier
2006-05-07, 01:11
Logfile of HijackThis v1.99.1
Scan saved at 7:05:04 PM, on 5/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ipwins\ipwins.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Valve\Steam\Steam.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Windows NT\whypertrm.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Hijackthis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {72C3A257-5BE4-400C-8FDE-620E32AB2C24} - C:\Program Files\MSN\horejoru.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [sys0304602823-16] C:\WINDOWS\sys0304602823-16.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [Steam] C:\Program Files\Valve\Steam\\Steam.exe -silent
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: BitTorrent.lnk = C:\Program Files\BitTorrent\bittorrent.exe
O4 - Startup: Z_Start.lnk = C:\WINDOWS\system32\pmdsregs.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner Class) - http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B3872502-F9FD-4E96-93FF-0D37298F0689} (SOESysInfo Control) - http://everquest2.station.sony.com/systemscan/soesysinfo.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/en/check/qdiagh.cab?326
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

Ravier
2006-05-07, 01:12
:mozilla.17:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.27:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.29:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.31:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.32:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.35:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.56:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.57:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.58:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.59:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.60:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.61:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.62:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.63:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.64:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.65:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.69:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.70:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.71:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.73:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.74:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.102:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.103:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.104:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.105:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.106:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.107:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.131:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.133:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.134:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.135:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.136:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.137:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.138:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.151:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.152:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.153:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.154:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.155:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.156:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.162:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.163:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.185:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.186:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.187:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.188:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.189:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.201:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.227:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned with backup
:mozilla.293:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.337:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Paycounter : Cleaned with backup
:mozilla.347:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.348:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.349:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.350:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.368:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.370:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup

Ravier
2006-05-07, 01:12
:mozilla.371:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.372:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.373:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.399:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.400:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.401:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.402:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.403:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.404:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.413:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.414:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.415:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.420:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.421:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.422:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.423:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.424:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.425:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.426:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.427:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.428:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.429:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.430:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.431:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.432:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.440:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.441:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.442:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.443:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.444:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.478:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.479:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.480:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.481:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.486:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.487:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.488:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.489:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.490:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.491:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.492:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Cqcounter : Cleaned with backup
:mozilla.494:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.495:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.496:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.497:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned with backup
:mozilla.506:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.547:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.548:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.549:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.550:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.568:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.572:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.573:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.574:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.603:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup
:mozilla.623:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.624:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.676:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned with backup
:mozilla.677:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned with backup
:mozilla.678:C:\Documents and Settings\Scotty\Application Data\Mozilla\Firefox\Profiles\m4itqcrb.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned with backup
C:\Documents and Settings\Scotty\Cookies\scotty@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Scotty\Cookies\scotty@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned with backup
C:\Documents and Settings\Scotty\Cookies\scotty@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\WINDOWS\system32\mwinnqaf.exe -> Adware.ZenoSearch : Cleaned with backup

illukka
2006-05-08, 21:55
hi

i dont think the ewido log is complete, can you post it again?
however i dont need to see the detected cookies so you can remove them from the report. my primary interest is the list of detected files and registry entries


open hijackhtis, click do a system scan only
checkmark these entries, if still there:
O2 - BHO: (no name) - {72C3A257-5BE4-400C-8FDE-620E32AB2C24} - C:\Program Files\MSN\horejoru.dll (file missing)
O4 - HKLM\..\Run: [sys0304602823-16] C:\WINDOWS\sys0304602823-16.exe
O4 - HKLM\..\Run: [IpWins] C:\Program Files\ipwins\ipwins.exe
O4 - Startup: Z_Start.lnk = C:\WINDOWS\system32\pmdsregs.exe


then close all browsers and explorer windows, leaving only hijackthis running

and click fix checked

reboot

rescan with hijackthis and post the new log

tashi
2006-05-13, 15:14
This topic has been closed to prevent others with similar issues posting in it.
If you need it re-opened please send me or your helper a pm and provide a link to the thread.