help with vmondo and spywareremover2009

Printable View

2009-03-22, 15:22
nikonmikon

help with vmondo and spywareremover2009

Hi. I keep getting a popup for Spyware Remover 2009

http://img230.imageshack.us/img230/6...emover2k9m.jpg

I did a HJT scan but I ran combofix after. :oops: I didn't realize that I shouldn't have. Thankfully I did do the HJT scan before so that can help you guys. I did not run anything else after combofix and that is where I am in the current timeframe of things (ran hjt, ran combofix-system rebooted, i'm posting here) I apologize for doing that. Hopefully I can still receive some help?

I did a little research and I don't think I actually have Spyware Remover 2009 based on removal instructions because none of the files and locations exist (program files and so on) but I do think I have vmondo maybe.

HJT log I created before running combofix follows:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:54:44 AM, on 3/22/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
E:\Program Files\Java\jre6\bin\jqs.exe
E:\WINDOWS\system32\nvsvc32.exe
E:\WINDOWS\system32\PnkBstrA.exe
E:\WINDOWS\system32\PnkBstrB.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\CTHELPER.EXE
E:\WINDOWS\explorer.exe
E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
E:\Install Files\HJT\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4eed181e-157c-498e-878f-c73c6993be3c} - E:\WINDOWS\system32\yarawafi.dll
O2 - BHO: {1bbde8e7-27ed-1beb-9fb4-10cfe6f3bfe6} - {6efb3f6e-fc01-4bf9-beb1-de727e8edbb1} - E:\WINDOWS\system32\pdeitl.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [CTSysVol] E:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [IMJPMIG8.1] "E:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] E:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] E:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] E:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "E:\Program Files\RivaTuner v2.22\RivaTuner.exe" /S
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [bidaruwemu] Rundll32.exe "E:\WINDOWS\system32\giyabovi.dll",s
O4 - HKLM\..\Run: [e421d4f4] rundll32.exe "E:\WINDOWS\system32\sosobedu.dll",b
O4 - HKLM\..\Run: [CPM27ce1674] Rundll32.exe "E:\WINDOWS\system32\januzesi.dll",a
O4 - HKCU\..\Run: [CGFLoader] E:\Program Files\Calibrize\CalibrizeLoader.exe
O4 - HKCU\..\Run: [CalibrizeResume] E:\Program Files\Calibrize\CalibrizeResume.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [SetDefaultMIDI] MIDIDEF.EXE /s:'Creative SoundFont Synthesizer' /w:'SB Audigy' (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [SetDefaultMIDI] MIDIDEF.EXE /s:'Creative SoundFont Synthesizer' /w:'SB Audigy' (User 'Default user')
O4 - Global Startup: allSnap.lnk = E:\Program Files\allSnap\allSnap.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - E:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{22B46FF2-FFF9-4851-9A1A-2A8226640CC0}: NameServer = 208.180.42.100,208.180.42.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F90DBE3-2648-4ED3-AB5F-3DE6DCF7642C}: NameServer = 208.180.42.100,208.180.42.68
O20 - AppInit_DLLs: E:\WINDOWS\system32\kokidine.dll pdeitl.dll e:\windows\system32\vuzupeno.dll e:\windows\system32\januzesi.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - e:\windows\system32\januzesi.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - e:\windows\system32\januzesi.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MSCSPTISRV - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: npkcmsvc - Unknown owner - H:\Program Files\Nexon\npkcmsvc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - E:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - E:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - E:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - E:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

--
End of file - 6956 bytes

Please definitely let me know if you want me to post the subsequent combofix log.

Again sorry for running combofix afterwards. :sad:

An update: I noticed that Internet Explorer was defaulted to my system browser now. Google Chrome has been my default browser for a very long time and I'm not sure if combofix did this or not. I have changed it back to Chrome for the time being.
2009-03-22, 20:32
pskelley
Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance) http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

Make sure you read and follow the directions, anything else will slow the process and waste both of our time. I suggest you keep this computer offline except when troubleshooting, the junk may download more. If you have any tool I use, delete it and download it new from the link I provide. Read and follow the directions carefully, the tools will not work unless you do.
The junk can be tough to remove, so do not expect fast or easy.

Pinned (sticky) to the top of this forum, and posted above are the directions, make sure you have read and followed them.

1) First question...I run AVG 8 free myself and to my knowledge, AVG 7 is out of date. Why are you running an out of date antivirus program.

2) Be 100% positive you read those directions, HijackThis is located unsafely and not where the instructions say? Follow these directions:

Download Trend Micro Hijack This™ to your Desktop
http://download.bleepingcomputer.com...HJTInstall.exe
Doubleclick the HJTInstall.exe to start it.
By default it will install HijackThis in the Program Files\Trendmicro folder and create a desktop shortcut.
HijackThis will open after install. Press the Scan button below.
This will start the scan and open a log. <<< close HJT until I ask for a log later.

3) Please DO NOT ENABLE Spybot S&D TeaTimer while we work together.

4) A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own. This tool is not a toy and not for everyday use

Download ComboFix from here:

Link 1

* IMPORTANT !!! Save ComboFix.exe to your Desktop
- Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
- See this Link for programs that need to be disabled and instruction on how to disable them.
- Remember to re-enable them when we're done.
- Double click on ComboFix.exe & follow the prompts.
- As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
- Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

http://i24.photobucket.com/albums/c3...45/RcAuto1.gif

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

http://i24.photobucket.com/albums/c3...5/whatnext.jpg

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply along with a New Hijackthis log.

*If there is no internet connection when Combofix has completely finished then restart your computer to restore back the connections.

Tutorial if needed
http://www.bleepingcomputer.com/comb...o-use-combofix

5) Post also an uninstall list: Open Hijackthis.
Click the "Open the Misc Tools" section Button.
Click the "Open Uninstall Manager" Button.
Click the "Save list..." Button.
Save it to your desktop. Copy and paste the contents into your reply.
(You may edit out Microsoft, Hotfixes, Security Update for Windows XP,
Update for Windows XP and Windows XP Hotfix to shorten the list)
Image: http://img.bleepingcomputer.com/tuto...nstall-man.jpg

Thanks
2009-03-23, 02:30
nikonmikon

1: I didn't want to run 8 because it seemed to be more resource intensive but, I will install it after this.

2: I put HJT in the location it was in manually.

3: I do not believe I have TeaTimer loaded and I will continue to keep it that way for you :)

4: Ok

Here is the combofix log:
ComboFix 09-03-22.01 - Mike 2009-03-22 20:12:37.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.3326.2880 [GMT -5:00]
Running from: e:\documents and settings\Mike\Desktop\ComboFix.exe
AV: AVG 7.5.557 *On-access scanning disabled* (Updated)
* Created a new restore point
.

((((((((((((((((((((((((( Files Created from 2009-02-23 to 2009-03-23 )))))))))))))))))))))))))))))))
.

2009-03-22 20:05 . 2009-03-22 20:05 <DIR> d-------- e:\program files\Trend Micro
2009-03-22 13:18 . 2009-03-22 13:18 <DIR> d-------- e:\program files\tuxguitar-1.0
2009-03-22 13:18 . 2009-03-22 13:22 <DIR> d-------- e:\documents and settings\Mike\.tuxguitar-1.0
2009-03-19 22:49 . 2009-03-20 18:00 <DIR> d-------- e:\program files\REAPER
2009-03-19 22:49 . 2009-03-20 18:02 <DIR> d-------- e:\documents and settings\Mike\Application Data\REAPER
2009-03-19 11:02 . 2009-03-19 11:02 16 --a------ e:\windows\system32\w3data.vss
2009-03-19 11:02 . 2009-03-19 11:02 16 --a------ e:\windows\msocreg32.dat
2009-03-19 10:43 . 2009-03-19 10:43 <DIR> d-------- e:\program files\Vstplugins
2009-03-19 10:43 . 2009-03-19 10:43 <DIR> d-------- e:\program files\Sonoma Wire Works
2009-03-19 10:43 . 2009-03-19 10:43 <DIR> d-------- e:\program files\IK Multimedia
2009-03-19 10:43 . 2009-03-19 10:43 <DIR> d-------- e:\documents and settings\All Users\Application Data\Sonoma Wire Works
2009-03-11 20:33 . 2004-08-04 07:00 221,184 --a------ e:\windows\system32\wmpns.dll
2009-03-10 19:53 . 2004-08-04 00:56 159,232 --a------ e:\windows\system32\ptpusd.dll
2009-03-10 19:53 . 2004-08-03 22:58 15,104 --a------ e:\windows\system32\drivers\usbscan.sys
2009-03-10 19:53 . 2004-08-03 22:58 15,104 --a--c--- e:\windows\system32\dllcache\usbscan.sys
2009-03-10 19:53 . 2001-08-17 22:36 5,632 --a------ e:\windows\system32\ptpusb.dll
2009-03-04 02:42 . 2009-03-13 03:56 189,072 --a------ e:\windows\system32\PnkBstrB.xtr

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-22 20:38 --------- d-----w e:\documents and settings\Mike\Application Data\Skype
2009-03-22 20:38 --------- d-----w e:\documents and settings\Mike\Application Data\.purple
2009-03-22 13:53 --------- d-----w e:\documents and settings\Mike\Application Data\gtk-2.0
2009-03-22 12:50 --------- d-----w e:\documents and settings\Mike\Application Data\AVG7
2009-03-21 20:54 --------- d-----w e:\program files\Steam
2009-03-21 12:27 --------- d-----w e:\documents and settings\Mike\Application Data\OpenOffice.org2
2009-03-16 02:48 --------- d-----w e:\program files\Spybot - Search & Destroy
2009-03-13 08:56 189,072 ----a-w e:\windows\system32\PnkBstrB.exe
2009-03-13 08:01 138,920 ----a-w e:\windows\system32\drivers\PnkBstrK.sys
2009-03-12 19:21 --------- d-----w e:\documents and settings\Mike\Application Data\Azureus
2009-03-12 02:18 --------- d-----w e:\program files\Azureus
2009-03-08 08:25 --------- d-----w e:\documents and settings\Mike\Application Data\X-Chat 2
2009-03-04 07:20 75,064 ----a-w e:\windows\system32\PnkBstrA.exe
2009-02-24 07:16 --------- d-----w e:\documents and settings\Mike\Application Data\dvdcss
2009-02-09 10:19 1,846,272 ----a-w e:\windows\system32\win32k.sys
2009-02-06 09:51 --------- d-----w e:\program files\MagicISO
2009-02-06 03:51 --------- d-----w e:\program files\PowerISO
2009-02-04 11:38 --------- d-----w e:\program files\megui
2009-02-04 00:04 --------- d-----w e:\program files\Sonic Foundry
2009-02-04 00:04 --------- d-----w e:\program files\Pure Motion
2009-02-04 00:04 --------- d-----w e:\program files\DebugMode
2009-02-03 16:41 --------- d-----w e:\program files\palmOne
2009-02-03 03:09 368,640 ----a-w e:\windows\system32\ReWire.dll
2009-01-24 05:26 --------- d-----w e:\program files\Common Files\Wise Installation Wizard
2009-01-24 05:26 --------- d-----w e:\documents and settings\All Users\Application Data\nView_Profiles
2009-01-23 20:47 --------- d-----w e:\program files\AGEIA Technologies
2009-01-17 13:57 22,328 ----a-w e:\documents and settings\Mike\Application Data\PnkBstrK.sys
2009-01-17 13:57 2,337,865 ----a-w e:\windows\system32\pbsvc.exe
2008-12-26 06:08 453,152 ----a-w e:\windows\system32\nvudisp.exe
2008-12-24 03:58 453,152 ----a-w e:\windows\system32\NVUNINST.EXE
.

((((((((((((((((((((((((((((( SnapShot@2009-03-22_ 8.30.54.04 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-03-22 21:32:48 16,384 ----atw e:\windows\Temp\Perflib_Perfdata_6d0.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CGFLoader"="e:\program files\Calibrize\CalibrizeLoader.exe" [2007-11-26 1961984]
"CalibrizeResume"="e:\program files\Calibrize\CalibrizeResume.exe" [2007-11-26 413696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTSysVol"="e:\program files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe" [2002-10-29 49152]
"AVG7_CC"="e:\progra~1\Grisoft\AVG7\avgcc.exe" [2009-02-24 590848]
"IMJPMIG8.1"="e:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952]
"MSPY2002"="e:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 59392]
"PHIME2002ASync"="e:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
"PHIME2002A"="e:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
"RivaTunerStartupDaemon"="e:\program files\RivaTuner v2.22\RivaTuner.exe" [2008-12-29 2732032]
"NvCplDaemon"="e:\windows\system32\NvCpl.dll" [2009-01-15 13680640]
"NvMediaCenter"="e:\windows\system32\NvMcTray.dll" [2009-01-15 86016]
"CTHelper"="CTHELPER.EXE" [2006-08-11 e:\windows\CTHELPER.EXE]
"CTxfiHlp"="CTXFIHLP.EXE" [2006-08-11 e:\windows\system32\CTXFIHLP.EXE]
"nwiz"="nwiz.exe" [2009-01-15 e:\windows\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG7_Run"="e:\progra~1\Grisoft\AVG7\avgw.exe" [2008-02-14 219136]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SetDefaultMIDI"="MIDIDEF.EXE" [2006-08-11 e:\windows\MIDIDEF.EXE]

e:\documents and settings\All Users\Start Menu\Programs\Startup\
allSnap.lnk - e:\program files\allSnap\allSnap.exe [2008-01-17 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.ac3filter"= ac3filter.acm
"VIDC.D263"= xl_x263dec.dll

[HKLM\~\startupfolder\E:^Documents and Settings^Mike^Start Menu^Programs^Startup^allSnap.lnk]
path=e:\documents and settings\Mike\Start Menu\Programs\Startup\allSnap.lnk
backup=e:\windows\pss\allSnap.lnkStartup

[HKLM\~\startupfolder\E:^Documents and Settings^Mike^Start Menu^Programs^Startup^Sprint media monitor.lnk]
path=e:\documents and settings\Mike\Start Menu\Programs\Startup\Sprint media monitor.lnk
backup=e:\windows\pss\Sprint media monitor.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2007-10-10 22:51 39792 e:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileZilla Server Interface]
--a------ 2008-11-10 11:35 942080 e:\program files\FileZilla Server\FileZilla Server Interface.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
--a----t- 2008-09-04 14:21 133104 e:\documents and settings\Mike\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NNma]
--a------ 2008-05-26 23:47 999479 e:\program files\NNsquad\nnma.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteCenter]
--a------ 2002-11-21 12:33 135168 e:\program files\Creative\MediaSource\RemoteControl\RcMan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SBDrvDet]
--a------ 2002-12-03 21:06 45056 e:\program files\Creative\SB Drive Det\SBDrvDet.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2008-09-29 14:12 144792 e:\program files\Java\jre6\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]
--------- 2000-05-11 04:00 90112 e:\windows\Updreg.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTHelper]
--a------ 2006-08-11 17:56 17920 e:\windows\CTHELPER.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTxfiHlp]
--a------ 2006-08-11 17:56 18944 e:\windows\system32\CTXFIHLP.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"AresChatServer"=3 (0x3)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"e:\\Program Files\\Pidgin\\pidgin.exe"=
"e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\counter-strike source\\hl2.exe"=
"e:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe"=
"e:\\Program Files\\Ares\\Ares.exe"=
"e:\\Program Files\\Electronic Arts\\Battlefield 2142\\BF2142.exe"=
"c:\\Install Files\\Nesticle\\nesticle\\NESTCL95.EXE"=
"e:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\xchat\\xchat.exe"=
"e:\\Program Files\\FileZilla FTP Client\\filezilla.exe"=
"e:\\Program Files\\Azureus\\Azureus.exe"=
"e:\\Program Files\\AIM\\aim.exe"=
"e:\\Program Files\\Grisoft\\AVG7\\avginet.exe"=
"e:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"=
"e:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"=
"e:\\Program Files\\Winamp\\winamp.exe"=
"e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\source sdk base\\hl2.exe"=
"e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\team fortress 2\\hl2.exe"=
"e:\\Program Files\\Steam\\Steam.exe"=
"e:\\Program Files\\Codemasters\\GRID Demo\\GRID.exe"=
"e:\\Program Files\\NNsquad\\nnma.exe"=
"e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\half-life 2 deathmatch\\hl2.exe"=
"e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\day of defeat source beta\\hl2.exe"=
"e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\day of defeat source\\hl2.exe"=
"e:\\Program Files\\RealVNC\\VNC4\\winvnc4.exe"=
"e:\\Program Files\\Electronic Arts\\Crytek\\Crysis SP Demo\\Bin32\\Crysis.exe"=
"e:\\Program Files\\Java\\jre1.6.0_07\\bin\\java.exe"=
"e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\insurgency\\hl2.exe"=
"e:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"e:\\WINDOWS\\system32\\PnkBstrA.exe"=
"e:\\WINDOWS\\system32\\PnkBstrB.exe"=
"h:\\Program Files\\Activision\\Call of Duty - World at War Beta\\CoDWaWbeta.exe"=
"e:\\Program Files\\RealVNC\\VNC4\\vncviewer.exe"=
"e:\\WINDOWS\\system32\\sessmgr.exe"=
"e:\\Program Files\\SPRINT_WTK_331\\bin\\zayit.exe"=
"e:\\Program Files\\NetMeeting\\conf.exe"=
"e:\\Program Files\\FileZilla Server\\FileZilla Server Interface.exe"=
"e:\\Program Files\\Steam\\steamapps\\common\\rainbow six vegas 2\\Binaries\\RainbowSixVegas2_SADS.exe"=
"e:\\Program Files\\Steam\\steamapps\\common\\call of duty 4\\iw3sp.exe"=
"e:\\Program Files\\Steam\\steamapps\\common\\call of duty 4\\iw3mp.exe"=
"e:\\Program Files\\Steam\\steamapps\\common\\rainbow six vegas 2\\Binaries\\R6Vegas2_Game.exe"=
"e:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"e:\\Program Files\\Steam\\steamapps\\common\\left 4 dead\\left4dead.exe"=
"e:\\WINDOWS\\system32\\taskmgr.exe"=
"e:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 SiWinAcc;SiWinAcc;e:\windows\system32\drivers\SiWinAcc.sys [2008-12-18 10368]
R1 Ext2fs;Ext2fs;e:\windows\system32\drivers\ext2fs.sys [2008-01-31 179584]
R1 IfsMount;IfsMount;e:\windows\system32\drivers\ifsmount.sys [2008-01-31 49536]
R3 ctgame;Game Port;e:\windows\system32\drivers\ctgame.sys [2002-12-30 12160]
R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;e:\windows\system32\drivers\libusb0.sys [2008-01-26 33792]
R3 XIRLINK;IBM PC Camera;e:\windows\system32\drivers\C-itNT.sys [2008-06-03 899884]
S3 L6PODP;PODxt Pro Service;e:\windows\system32\drivers\L6PODP.sys [2008-02-01 514432]
S3 NPF;NetGroup Packet Filter Driver;e:\windows\system32\drivers\npf.sys [2007-06-28 42512]
S3 RTLWUSB;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter;e:\windows\system32\drivers\RTL8187.sys [2008-01-18 176128]
S4 libusbd;LibUsb-Win32 - Daemon, Version 0.1.10.1;system32\libusbd-nt.exe --> system32\libusbd-nt.exe [?]
.
Contents of the 'Scheduled Tasks' folder

2009-03-22 e:\windows\Tasks\GoogleUpdateTaskUser.job
- e:\documents and settings\Mike\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-04 14:21]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
Trusted Zone: aol.com\free
TCP: {22B46FF2-FFF9-4851-9A1A-2A8226640CC0} = 208.180.42.100,208.180.42.68
TCP: {4F90DBE3-2648-4ED3-AB5F-3DE6DCF7642C} = 208.180.42.100,208.180.42.68
FF - ProfilePath - e:\documents and settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - plugin: e:\documents and settings\Mike\Local Settings\Application Data\Google\Update\1.2.131.11\npGoogleOneClick5.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-22 20:15:44
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CTHelper = CTHELPER.EXE?
CTxfiHlp = CTXFIHLP.EXE?

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-1659004503-842925246-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{82AB9FC8-8997-ED70-382E-4F4506F407C3}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
Completion time: 2009-03-22 20:21:35
ComboFix-quarantined-files.txt 2009-03-23 01:20:28
ComboFix2.txt 2009-03-22 13:32:38

Pre-Run: 14,542,528,512 bytes free
Post-Run: 14,531,125,248 bytes free

218 --- E O F --- 2009-03-14 02:23:17

here is the HJT log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:07:25 PM, on 3/22/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
E:\Program Files\Java\jre6\bin\jqs.exe
E:\WINDOWS\system32\nvsvc32.exe
E:\WINDOWS\system32\HPZipm12.exe
E:\WINDOWS\system32\PnkBstrA.exe
E:\WINDOWS\system32\PnkBstrB.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\wscntfy.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
E:\PROGRA~1\Grisoft\AVG7\avgcc.exe
E:\WINDOWS\CTHELPER.EXE
E:\WINDOWS\system32\RUNDLL32.EXE
E:\Program Files\Calibrize\CalibrizeResume.exe
E:\Program Files\allSnap\allSnap.exe
E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
E:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [CTSysVol] E:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [IMJPMIG8.1] "E:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] E:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] E:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] E:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "E:\Program Files\RivaTuner v2.22\RivaTuner.exe" /S
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CGFLoader] E:\Program Files\Calibrize\CalibrizeLoader.exe
O4 - HKCU\..\Run: [CalibrizeResume] E:\Program Files\Calibrize\CalibrizeResume.exe
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [SetDefaultMIDI] MIDIDEF.EXE /s:'Creative SoundFont Synthesizer' /w:'SB Audigy' (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [SetDefaultMIDI] MIDIDEF.EXE /s:'Creative SoundFont Synthesizer' /w:'SB Audigy' (User 'Default user')
O4 - Global Startup: allSnap.lnk = E:\Program Files\allSnap\allSnap.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - E:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{22B46FF2-FFF9-4851-9A1A-2A8226640CC0}: NameServer = 208.180.42.100,208.180.42.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F90DBE3-2648-4ED3-AB5F-3DE6DCF7642C}: NameServer = 208.180.42.100,208.180.42.68
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MSCSPTISRV - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: npkcmsvc - Unknown owner - H:\Program Files\Nexon\npkcmsvc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - E:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - E:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - E:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - E:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

--
End of file - 6295 bytes
2009-03-23, 11:04
pskelley

AVG 8: Thanks for waiting until you are clean of malware, then I will post information to make the transition easier and a tutorial to save some resources.

Please read the instructions carefully, the uninstall list requested in instruction #5 is not posted...that's a lot of information to miss. Please post the uninstall list as soon as you have it.

e:\program files\Azureus <<< all p2p programs must be uninstalled.
http://forums.spybot.info/showthread.php?t=282

Quote:

If your helper detects the presence of such programs on your computer he/she will ask you to remove them. Help will be withdrawn should you not agree to their removal.

Mike, malware that was in the first HJT log is not in the second HJT log, in fact this scan: Scan saved at 8:07:25 PM, on 3/22/2009
appears clean. Either I am not seeing the combofix log that removed it or another tool was run prior to posting the last HJT log? Let's clean and get a second opinion.

Please download ATF Cleaner by Atribune
http://www.atribune.org/public-beta/ATF-Cleaner.exe
Save it to your Desktop. Run ATF Cleaner
Double-click ATF-Cleaner.exe to run the program.
Click Select All found at the bottom of the list.
Click the Empty Selected button.
Click Exit on the Main menu to close the program.

*Cleaning Prefetch may result in a few slow starts until the folder is repopulated:
http://www.windowsnetworking.com/art...efetch-XP.html

Download Malwarebytes' Anti-Malware to your Desktop
http://www.malwarebytes.org/

* Double-click mbam-setup.exe and follow the prompts to install the program.
* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform FULL SCAN, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt
* Please post contents of that file & a new HJT log in your next reply.

Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

Tutorial if needed:
http://www.techsupportteam.org/forum...ware-mbam.html

How is the computer running, any malware issues?

Thanks...Phil
2009-03-23, 19:08
nikonmikon

On AVG 8: No problem. I know it would make no sense to install it now because it could be compromised by anything with retrovirus tendencies.

I totally missed instruction #5. My mistake! :oops: There was a lot to read :)

I will uninstall Azureus as per your request :)

I ran HJT then Combofix. Then you told me to install another HJT and run it then run Combofix again and post each subsequent log. So you saw my first HJT, then your HJT then your Combofix log. I did not post the Combofix log that I created by running it before getting help from you. I dont think it exists anymore either because the 2nd running removed it? :(

Ran hjt before your help > log provided in 1st post
Ran cfix before your help> log was not provided
========decided to post a thread==============
Ran HJT per your request > log provided in 2nd post
Ran Cfix per your request > log provided in 2nd post

Hope that clears up the timeline a little. This pc is disconnected from the internet except when required to do your requests to keep down on any infections that could occur.

here is the uninstall list:
7-Zip 4.57
AC3Filter (remove only)
Adobe Flash Player 10 Plugin
Adobe Flash Player ActiveX
Adobe Reader 8.1.1
Adobe Shockwave Player 11
AFPL Ghostscript 8.54
AFPL Ghostscript Fonts
allSnap version 1.33.2
AOL Instant Messenger
ASUS WiFi-AP Solo
ASUSUpdate
Audiosurf
AVG 7.5
AVG Anti-Rootkit Free
Battlefield 2(TM)
Battlefield 2142
BitPim 1.0.6
Calibrize 2.0
Call of Duty 4: Modern Warfare
Call of Duty(R) - World at War(TM) Beta
Call of Duty(R) 4 - Modern Warfare(TM) Demo
Comical 0.8
Cool & Quiet
Counter-Strike: Source
Creative Audio Console
Creative MediaSource
Critical Update for Windows Media Player 11 (KB959772)
Crysis(R) SP Demo
Day of Defeat: Source Beta
DebugMode Wax 2.0
Digsby
DivX Codec
DivX Converter
DivX Player
DivX Web Player
Eraser
Ext2 IFS 1.11 for Windows XP
FastStone Image Viewer 3.6
FileZilla Client 3.2.0
FileZilla Server (remove only)
Fraps
Gimp 2.6.0
GRID Demo
GTK+ Runtime 2.14.6 rev a (remove only)
Guitar Pro 5.0
Half-Life 2
Half-Life 2: Deathmatch
Hamachi 1.0.3.0
HijackThis 2.0.2
I-Fluid 1.0
InfraRecorder
Inkscape 0.46
Insurgency
IrfanView (remove only)
J2SE Runtime Environment 5.0 Update 11
Japanese Fonts Support For Adobe Reader 8
Java(TM) 6 Update 10
Java(TM) 6 Update 7
KeyTweak - Keyboard Remapper (remove only)
Left 4 Dead
LibUSB-Win32-0.1.10.1
Line 6 Drivers 3.3.3.6 (Remove Only)
Line 6 Edit (remove only)
Line 6 Monkey 1.21 (Remove Only)
Magic ISO Maker v5.5 (build 0273)
MapleStory
MeGUI modern media encoder (remove only)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Windows XP Video Decoder Checkup Utility
Mozilla Firefox (3.0.7)
Network Measurement Agent
NVIDIA Drivers
NVIDIA ForceWare Network Access Manager
NVIDIA PhysX
OpenAL
OpenMG Limited Patch 4.7-07-14-05-01
OpenMG Secure Module 4.7.00
OpenOffice.org 2.3
OpenSSL 0.9.8g
Palm Desktop
PC Probe II
Phun beta 3.5
Pidgin
Portal
PowerISO
PunkBuster Services
QPST
Rainbow Six Vegas 2
REAPER
RiffWorks T4
RivaTuner v2.22
SAMSUNG Mobile Composite Device Software
Samsung Mobile phone USB driver Software
SAMSUNG Mobile USB Modem 1.0 Software
SAMSUNG Mobile USB Modem Software
Security Update for Windows Media Encoder (KB954156)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB936782)
Skype 3.1
SonicStage 4.3
Sound Blaster Audigy 2
Source SDK Base
Sprint media manager
Sprint Wireless Toolkit 3.3.1 - Powered by Sun Java Technology
Spybot - Search & Destroy
Stacker Blocks 3D
Steam
System Requirements Lab
Team Fortress 2
TeamSpeak 2 RC2
TuxGuitar
Viewpoint Media Player
VLC media player 0.9.6
VNC Free Edition 4.1.2
VobSub v2.23 (Remove Only)
VTFEdit 1.2.5
Waves Mercury Complete VST DX RTAS v1.01
Winamp
Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Media Encoder 9 Series
Windows Media Encoder 9 Series
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
WinPcap 4.0.1
Yahoo! Messenger

I have run ATF Cleaner the way you instructed.

Here is the malwarebytes log:
Malwarebytes' Anti-Malware 1.34
Database version: 1888
Windows 5.1.2600 Service Pack 2

3/23/2009 12:46:56 PM
mbam-log-2009-03-23 (12-46-56).txt

Scan type: Full Scan (C:\|D:\|E:\|H:\|I:\|J:\|K:\|)
Objects scanned: 779303
Time elapsed: 3 hour(s), 27 minute(s), 23 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 4
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 3

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx.1 (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{04a38f6b-006f-4247-ba4c-02a139d5531c} (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{3c2d2a1e-031f-4397-9614-87c932a848e0} (Adware.Minibug) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
E:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll (Adware.Minibug) -> Quarantined and deleted successfully.
C:\Install Files\vegas\Keygen\keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
E:\Documents and Settings\Mike\Desktop\spywareremover2k9.jpg (Rogue.Spyware.Remover) -> Quarantined and deleted successfully.

I don't understand why the jpg screenshot I created is a 'rogue spyware remover' according to malwarebytes? I made that file and named it that.... anything infected from the C: is not really relevant because I do not run or use any applications on that drive.

The computer runs good, but it is disconnected from the internet so there's no real telling yet. For the times it was connected however, it ran good. I may have found the first combofix log in a folder called Qoobox. It is located as such: E:\Qoobox\Combofix2.txt dated March 22 2009 at 8:32AM. There is another one located in the same folder called ComboFix-quarantined-files.txt dated March 22 2009 but it is timestamped 8:20PM but it has a lot of dll files in it. Let me know if you'd like these. I know that these were created during my first run of combofix because I saw this folder right after I ran it before posting here.
2009-03-23, 20:52
pskelley

Concerned I am about this one, please read the information in the links:
C:\Install Files\vegas\Keygen\keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
http://en.wikipedia.org/wiki/Keygen
http://forums.spybot.info/showpost.p...90&postcount=4

I will try to move past that information, commenting on the uninstall list first.
This can be done as time permits, but it is important, and may be why you are infected.
Uninstall list: I look for malware and security issues and will not know all of your programs, but you should.
Hackers are using out of date programs to infect folks more and more,
Here is a small free tool that lets you know when something needs an update if you are interested:
http://secunia.com/vulnerability_scanning/personal/ While PSI runs in the System Tray for realtime notifications, I personally prefer to turn it off in MSConfig and run it from All Programs when I want to do a check.

Adobe Flash Player 10 Plugin
Adobe Flash Player ActiveX
Adobe recommends all users of Adobe Flash Player 10.0.12.36 and earlier versions upgrade to the newest version 10.0.22.87
http://www.adobe.com/support/securit...apsb09-01.html

Adobe Reader 8.1.1 <<< out of date and unsafe, see this:
http://news.cnet.com/8301-1009_3-100...ml?tag=nl.e433
http://www.filehippo.com/download_adobe_reader/
(if you want a smaller program, look at this one)
Foxit Reader 2.3 for Windows (make sure to uncheck any toolbars)
http://www.foxitsoftware.com/pdf/rd_intro.php

Java(TM) 6 Update 10
Java(TM) 6 Update 7
Both out of date and unsafe, see this:
http://forums.spybot.info/showpost.p...80&postcount=2
Be aware of this information so you can opt out of anything you do not want.
Microsoft Does MSN Toolbar Distribution Deal With Java:
http://searchengineland.com/microsof...java-15413.php

Viewpoint Media Player
For your information, Viewpoint is installed by aol probably without your knowledge. I suggest you uninstall this resource waster in Add Remove programs.
http://www.spywareinfo.com/newslette....php#viewpoint
http://www.clickz.com/news/article.php/3561546
http://vil.nai.com/vil/content/v_137262.htm

Let's see if we can get AVG updated now, please review this information first to see if you wish to use it:
How to Install Free version AVG 8.0 without LinkScanner feature
http://russelltexas.com/tutorials/avg8install.htm

Download AVG 8 installer and save it to the Desktop
http://free.avg.com/download-avg-ant...s-free-edition
If you want FREE be sure to click: free for private use only

Once you have the installer saved on the Desktop then you can go to Add Remove programs and uninstall AVG 7.5.
I found that out the hard way and had to stop right in the middle of the installion.

Once the old version is uninstalled, restart the computer to make sure it is gone, then double click the installer and follow the prompts.

Let's run a scan now, post the scan results unless they are clean.

* Right click the icon for AVG in System Tray and choose Open AVG User Interface.

* Click on Update now, allow AVG to download and install any new updates.

* Click on Computer Scanner then choose "Scan whole computer", this takes a round one hour on the computer I am using now.

* Near the bottom above the words "The scan is complete" choose "Export overview to file"

* Choose Desktop and give it a name you will recognize like AVG Scan Results, then choose SAVE.

* Close results and close the Interface.

* Copy and paste the contents of that file.

Thanks
2009-03-24, 04:12
nikonmikon

Oh yes that keygen. They are dated 2006. I do not run pirated software. I have a pretty good idea how I was infected with this most recent affliction. I was navigating the web and arrived at a page and someone sent me a message on aim and I started typing to them and while I was typing a popup quickly appeared and I hit enter because I was still typing to my friend in aim. The popup stole focus and recieved my keystroke enter and allowed whatever it was to run. I was really upset. I noticed problems nearly right after that. The spyware remover popups started appearing and whatnot. Please don't hold it against me that I have old things. As you can see my operating hard disk is labeled e: and c: is just an old drive that I never access save for some old music files and things I recorded.

Could you explain to me why malwarebytes removed my screenshot and deemed it as a rogue spyware remover? I can not for the life of me imagine how it came upon that conclusion when I created it as a JPG file. It is the same exact JPG image I posted in this thread at the very beginning.

I will definitely update my adobe products as well as the JRE and install AVG right now.

Here is the AVG log please keep in mind the keygen/crack software is old and i do not run it. c: is not my active drive.
"Scan ""Scan whole computer"" was finished."
"Infections";"22";"5";"17"
"Spyware";"30";"21";"9"
"Folders selected for scanning:";"Scan whole computer"
"Scan started:";"Monday, March 23, 2009, 5:04:33 PM"
"Scan finished:";"Monday, March 23, 2009, 8:57:09 PM (3 hour(s) 52 minute(s) 36 second(s))"
"Total object scanned:";"1723674"
"User who launched the scan:";"Mike"

"Infections"
"File";"Infection";"Result"
"C:\NVIDIA\nForceWin2KXP\5.10\IDE\Win2K\nvuide.exe";"Trojan horse Generic13.JQO";"Moved to Virus Vault"
"C:\NVIDIA\nForceWin2KXP\5.10\IDE\WinXP\nvuide.exe";"Trojan horse Generic13.JQO";"Moved to Virus Vault"
"C:\NVIDIA\nForceWin2KXP\5.10\MemCtl\nvumctl.exe";"Trojan horse Generic13.JQO";"Moved to Virus Vault"
"C:\NVIDIA\nForceWin2KXP\5.10\SMBus\nvusmb.exe";"Trojan horse Generic13.JQO";"Moved to Virus Vault"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe";"Virus found Win32/Heur";"Infected"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00100";"Virus found Win32/Heur";"Infected"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00115";"Virus found Win32/Heur";"Infected"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00125";"Virus found Win32/Heur";"Infected"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00133";"Virus found Win32/Heur";"Infected"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00141";"Virus found Win32/Heur";"Infected"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00149";"Virus found Win32/Heur";"Infected"
"D:\Installs\DVD X Copy Platinum\DVDXCopy_Platinum_v4.0.3.8_full_install.exe";"Virus found Win32/Heur";"Infected"
"D:\Installs\DVD X Copy Platinum\DVDXCopy_Platinum_v4.0.3.8_full_install.exe:\ns_00003";"Virus found Win32/Heur";"Infected"
"D:\Installs\DVD X Copy Platinum\DVDXCopy_Platinum_v4.0.3.8_full_install.exe:\ns_00004";"Virus found Win32/Heur";"Infected"
"D:\Installs\DVD X Copy Platinum\DVDXCopy_Platinum_v4.0.3.8_full_install.exe:\ns_00018";"Virus found Win32/Heur";"Infected"
"D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe";"Virus found Win32/Heur";"Infected"
"D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00005";"Virus found Win32/Heur";"Infected"
"D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00015";"Virus found Win32/Heur";"Infected"
"D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00018";"Virus found Win32/Heur";"Infected"
"D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00021";"Virus found Win32/Heur";"Infected"
"D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00030";"Virus found Win32/Heur";"Infected"
"D:\WINDOWS\system32\BO2802040113.dll";"Virus found Dropper.Exebind";"Moved to Virus Vault"

"Spyware"
"File";"Infection";"Result"
"C:\Documents and Settings\MikeyMike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
"C:\Documents and Settings\MikeyMike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.Standalone.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
"C:\Documents and Settings\MikeyMike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.VSTi.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
"C:\Install Files\HJT\backups\backup-20061202-113936-103.dll";"Adware Generic.SGG";"Moved to Virus Vault"
"C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll";"Adware Generic.VBJ";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\akcore.dll";"Adware Generic.PAW";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\B51914001\build2.exe";"Adware Generic.RTQ";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\nsvcin.exe";"Adware Generic.DUP";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\MTE1Mzc6ODoxMg.exe";"Adware Generic.DFX";"Moved to Virus Vault"
"D:\Installs\klgr\FamilyKeyLogger-setup.exe";"Potentially harmful program Logger.AIC";"Moved to Virus Vault"
"D:\Installs\klgr\FamilyKeyLogger-setup.exe:\$JF\ctfmon.dll";"Potentially harmful program Logger.B";"Moved to Virus Vault"
"D:\Installs\klgr\FamilyKeyLogger-setup.exe:\$JF\ctfmon.exe";"Potentially harmful program Logger.AIC";"Moved to Virus Vault"
"D:\Installs\klgr\FamilyKeyLogger-setup.exe:\$JF\ctfs.dll";"Potentially harmful program Logger.D";"Moved to Virus Vault"
"D:\Installs\setup_ares.exe";"Adware Generic.GXF";"Moved to Virus Vault"
"D:\Installs\setup_ares.exe:\ns_00036";"Adware Generic.GXF";"Moved to Virus Vault"
"D:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll";"Adware Generic.VBJ";"Moved to Virus Vault"
"D:\Program Files\Microsoft AntiSpyware\Quarantine\556C3B58-DE08-4F3D-B439-6AF2D2\DC07FC24-2C8D-48FC-BAE8-5AA24E";"Adware Generic.CBA";"Moved to Virus Vault"
"D:\Program Files\Microsoft AntiSpyware\Quarantine\9DB3C205-2726-43F1-AFB0-514C0D\0F0E1E88-40B2-4C3A-B97F-C12EB7";"Adware Generic.EQH";"Moved to Virus Vault"
"D:\WINDOWS\Downloaded Program Files\SAIX.dll";"Adware Generic.OHP";"Moved to Virus Vault"
"D:\WINDOWS\prelimhanse.exe";"Adware Generic.NLO";"Moved to Virus Vault"
"D:\WINDOWS\system32\akcore.dll";"Adware Generic.PAW";"Moved to Virus Vault"
"D:\WINDOWS\system32\o6nslg5716.dll";"Adware Generic.ADR";"Moved to Virus Vault"
"D:\WINDOWS\Temp\nsvcin.exe";"Adware Generic.DUP";"Moved to Virus Vault"
"D:\WINDOWS\Temp\vmstmp\vmstmp.exe";"Adware Generic.FBZ";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
"E:\Documents and Settings\Mike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.Standalone.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
"E:\Documents and Settings\Mike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.VSTi.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
"H:\temporary storage\Desktop Storage\my webspace\jupiter\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
"H:\temporary storage\Desktop Storage\my webspace\jupiter\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.Standalone.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
"H:\temporary storage\Desktop Storage\my webspace\jupiter\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.VSTi.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Potentially dangerous object"

"Warnings"
"File";"Infection";"Result"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt";"Found Tracking cookie.Doubleclick";"Healed"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\2o7.net.1913101d";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\2o7.net.484dbb69";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\advertising.com.1820df7a";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\advertising.com.203aa218";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\advertising.com.525a5fb9";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\advertising.com.b624fa46";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\advertising.com.f62113d5";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\atdmt.com.b3e33b5f";"Found Tracking cookie.Atdmt";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\doubleclick.net.bf396750";"Found Tracking cookie.Doubleclick";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\hitbox.com.2b95f8a3";"Found Tracking cookie.Hitbox";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\statcounter.com.71faa69c";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\tacoda.net.c4fe2ebb";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\tacoda.net.e9f57f8";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@2o7[1].txt";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@2o7[1].txt:\2o7.net.57e477c9";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt:\burstnet.com.27341d57";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt:\burstnet.com.c4fe2ebb";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[2].txt";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[2].txt:\cpvfeed.com.225fb011";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[2].txt:\cpvfeed.com.23f953b";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[2].txt:\cpvfeed.com.5fac0bd5";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[2].txt:\cpvfeed.com.f83873ed";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@m.webtrends[2].txt";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@m.webtrends[2].txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@questionmarket[2].txt";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@questionmarket[2].txt:\questionmarket.com.3eb5a9f1";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@questionmarket[2].txt:\questionmarket.com.4dd5e426";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.271f5c18";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.3f4566dd";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.44927ec";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.8d15c3aa";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[1].txt";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[1].txt:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[1].txt:\tacoda.net.c4fe2ebb";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[1].txt:\tacoda.net.e9f57f8";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@tribalfusion[2].txt";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@tribalfusion[2].txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@yadro[2].txt";"Found Tracking cookie.Yadro";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@yadro[2].txt:\yadro.ru.c77afad5";"Found Tracking cookie.Yadro";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@yieldmanager[1].txt";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Cookies\mikeymike@yieldmanager[1].txt:\yieldmanager.com.6ce984df";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@m.webtrends[2].txt";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@m.webtrends[2].txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@revsci[1].txt";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@revsci[1].txt:\revsci.net.12a42f6a";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@revsci[1].txt:\revsci.net.3f4566dd";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"C:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@revsci[1].txt:\revsci.net.44927ec";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt:\ad.yieldmanager.com.830b6f08";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt:\ad.yieldmanager.com.87a9ab5d";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt:\ad.yieldmanager.com.eec26c3e";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt:\ad.yieldmanager.com.8a47878";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt:\ad.yieldmanager.com.ff92306";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\Guest\Cookies\guest@msnportal.112.2o7[1].txt";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"D:\Documents and Settings\Guest\Cookies\guest@msnportal.112.2o7[1].txt:\msnportal.112.2o7.net.7225be6f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt";"Found Tracking cookie.2o7";"Healed"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\247realmedia.com.68087763";"Found Tracking cookie.247realmedia";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\2o7.net.2ebf85ed";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\2o7.net.404851f2";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\2o7.net.647d92b0";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\2o7.net.6d0150be";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\atdmt.com.b3e33b5f";"Found Tracking cookie.Atdmt";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\doubleclick.net.bf396750";"Found Tracking cookie.Doubleclick";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\tacoda.net.5935e89";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\adrevolver.com.4a719aa9";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\advertising.com.1820df7a";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\advertising.com.203aa218";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\advertising.com.f62113d5";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\casalemedia.com.80ad4799";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\fastclick.net.595d5695";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\fastclick.net.8a6435e9";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\media.adrevolver.com.2be00b0";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\media.adrevolver.com.539b0606";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\media.adrevolver.com.57f415b5";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\media.adrevolver.com.fa5187ad";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\mediaplex.com.f652b123";"Found Tracking cookie.Mediaplex";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\realmedia.com.68087763";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\realmedia.com.ef906bac";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\statse.webtrendslive.com.2521fe1b";"Found Tracking cookie.Webtrendslive";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\statse.webtrendslive.com.569b8452";"Found Tracking cookie.Webtrendslive";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\statse.webtrendslive.com.569b8452";"Found Tracking cookie.Webtrendslive";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\statse.webtrendslive.com.910abdf5";"Found Tracking cookie.Webtrendslive";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\tacoda.net.c4fe2ebb";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\trafficmp.com.5660bdd9";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\trafficmp.com.f26d6a3e";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Profiles\default\y7synwku.slt\cookies.txt";"Found Tracking cookie.2o7";"Healed"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Profiles\default\y7synwku.slt\cookies.txt:\2o7.net.2ebf85ed";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Profiles\default\y7synwku.slt\cookies.txt:\real.com.4862fb06";"Found Tracking cookie.Real";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Profiles\default\y7synwku.slt\cookies.txt:\real.com.6baf87ba";"Found Tracking cookie.Real";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Profiles\default\y7synwku.slt\cookies.txt:\zedo.com.ea38ec61";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@abetterinternet[1].txt";"Found Tracking cookie.Abetterinternet";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@abetterinternet[1].txt:\abetterinternet.com.40880089";"Found Tracking cookie.Abetterinternet";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@abetterinternet[1].txt:\abetterinternet.com.500e57dd";"Found Tracking cookie.Abetterinternet";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@abetterinternet[1].txt:\abetterinternet.com.5e90eebd";"Found Tracking cookie.Abetterinternet";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@abetterinternet[1].txt:\abetterinternet.com.b31a5bff";"Found Tracking cookie.Abetterinternet";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@abetterinternet[1].txt:\abetterinternet.com.eaffdc9a";"Found Tracking cookie.Abetterinternet";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@admarketplace[2].txt";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@admarketplace[2].txt:\admarketplace.net.9b1440c";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@admarketplace[2].txt:\admarketplace.net.a6c5ee3c";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@admarketplace[2].txt:\admarketplace.net.f062200";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adopt.euroclick[1].txt";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adopt.euroclick[1].txt:\adopt.euroclick.com.17044b51";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adopt.euroclick[1].txt:\adopt.euroclick.com.6d7740f7";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adopt.euroclick[1].txt:\adopt.euroclick.com.891542da";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adopt.euroclick[1].txt:\adopt.euroclick.com.8b1bd7bc";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt:\adorigin.com.29706606";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt:\adorigin.com.2a38207b";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt:\adorigin.com.4e5e92d6";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt:\adorigin.com.bf396750";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt:\adorigin.com.c54a016";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt:\adorigin.com.c9a58f18";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adrevolver[3].txt";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adrevolver[3].txt:\adrevolver.com.4a719aa9";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@ads.guardian.co[1].txt";"Found Tracking cookie.Co";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@ads.guardian.co[1].txt:\ads.guardian.co.uk.312f8dd0";"Found Tracking cookie.Co";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adtrak[2].txt";"Found Tracking cookie.Adtrak";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adtrak[2].txt:\adtrak.net.cf7f90fd";"Found Tracking cookie.Adtrak";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt:\burstnet.com.27341d57";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt:\burstnet.com.795c98fe";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt:\burstnet.com.c4fe2ebb";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[1].txt";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[1].txt:\cpvfeed.com.23f953b";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[1].txt:\cpvfeed.com.5fac0bd5";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[1].txt:\cpvfeed.com.f83873ed";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@dealtime[2].txt";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@dealtime[2].txt:\dealtime.com.2a6d70da";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@dealtime[2].txt:\dealtime.com.48a2428c";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@dealtime[2].txt:\dealtime.com.a164b0cd";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@dealtime[2].txt:\dealtime.com.f53eaefc";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@falkag[1].txt";"Found Tracking cookie.Falkag";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@falkag[1].txt:\falkag.net.795c98fe";"Found Tracking cookie.Falkag";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@gamershell[1].txt";"Found Tracking cookie.Gamershell";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@gamershell[1].txt:\gamershell.com.13a6979d";"Found Tracking cookie.Gamershell";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@gamershell[1].txt:\gamershell.com.8aafc627";"Found Tracking cookie.Gamershell";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@gamershell[1].txt:\gamershell.com.99c35e71";"Found Tracking cookie.Gamershell";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@hypertracker[1].txt";"Found Tracking cookie.Hypertracker";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@hypertracker[1].txt:\hypertracker.com.efa7882e";"Found Tracking cookie.Hypertracker";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@ivwbox[1].txt";"Found Tracking cookie.Ivwbox";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@ivwbox[1].txt:\ivwbox.de.41d82fe2";"Found Tracking cookie.Ivwbox";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@m.webtrends[2].txt";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@m.webtrends[2].txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@msnportal.112.2o7[1].txt";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@msnportal.112.2o7[1].txt:\msnportal.112.2o7.net.7225be6f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@questionmarket[2].txt";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@questionmarket[2].txt:\questionmarket.com.3eb5a9f1";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@questionmarket[2].txt:\questionmarket.com.4e513048";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.122bd7a6";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.1635d65f";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.1bfc0218";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.3f4566dd";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.44605440";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.44927ec";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.55564293";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.6132e6c9";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.652ce730";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.a64c3767";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.a175e6db";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.bfe9bf85";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.e1150a02";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.edc774d4";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.f5f26334";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.fb487293";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@searchportal.information[2].txt";"Found Tracking cookie.Information";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@searchportal.information[2].txt:\searchportal.information.com.3a8d7204";"Found Tracking cookie.Information";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@searchportal.information[2].txt:\searchportal.information.com.44e78b2";"Found Tracking cookie.Information";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@searchportal.information[2].txt:\searchportal.information.com.ac2fa2e1";"Found Tracking cookie.Information";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[2].txt";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.5935e89";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.c4fe2ebb";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.ed9c50d1";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.23194c51";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.5660bdd9";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.8852acdc";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.94d192dc";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.f26d6a3e";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.42abf50";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.c28a69e3";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.ffea4053";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tribalfusion[1].txt";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tribalfusion[1].txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.1663d518";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.1c779fa9";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.3455990f";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.6a4c392d";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.6f63bef7";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.734a2c6b";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.c7561bc1";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.ef741d67";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@yadro[1].txt";"Found Tracking cookie.Yadro";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@yadro[1].txt:\yadro.ru.c77afad5";"Found Tracking cookie.Yadro";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@yieldmanager[2].txt";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@yieldmanager[2].txt:\yieldmanager.com.6ce984df";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@yieldmanager[2].txt:\yieldmanager.com.795c98fe";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
2009-03-24, 04:13
nikonmikon

"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@zedo[2].txt";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@zedo[2].txt:\zedo.com.775ee79c";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@zedo[2].txt:\zedo.com.a5b6a132";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@zedo[2].txt:\zedo.com.c1dd09f2";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@zedo[2].txt:\zedo.com.cef1c7af";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Cookies\mikeymike@zedo[2].txt:\zedo.com.dd15d628";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@ad.yieldmanager[1].txt";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@admarketplace[2].txt:\admarketplace.net.9b1440c";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.3dabece";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.830b6f08";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.87a9ab5d";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.8a47878";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@admarketplace[2].txt";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@admarketplace[2].txt:\admarketplace.net.a6c5ee3c";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@searchportal.information[1].txt";"Found Tracking cookie.Information";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@searchportal.information[1].txt:\searchportal.information.com.3a8d7204";"Found Tracking cookie.Information";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@searchportal.information[1].txt:\searchportal.information.com.44e78b2";"Found Tracking cookie.Information";"Moved to Virus Vault"
"D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@searchportal.information[1].txt:\searchportal.information.com.b098cce1";"Found Tracking cookie.Information";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite";"Found Tracking cookie.2o7";"Healed"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\247realmedia.com.855b46d";"Found Tracking cookie.247realmedia";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.1aa86b19";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.41207ad0";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.419f6206";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.7ae9c250";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.8c2deff2";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.a1e6341f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.a698612e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.484dbb69";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.5cef2cf7";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.686f76b4";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.a66c055e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.bd50f876";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.c2f247d9";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.a8d88d11";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.aac6123b";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.abaa5208";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.ae5b0007";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.cb19198d";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.bd6b9f08";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.d286aa75";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.dd1cc291";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.e0b98030";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.f15b0949";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.f7a3e5fe";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\247realmedia.com.d90d45cf";"Found Tracking cookie.247realmedia";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.259cf38d";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.3639522a";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.419ddb50";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.1913101d";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.1fd2efb0";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.50ba3882";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.5fe08528";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.680f684a";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.69e1b881";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.6d21e8c2";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.747f40be";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.2574710e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.7815c7ab";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.7919062b";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.7ecfda1e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.9a526fbf";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.9eaabe7c";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.9f8b156b";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.ade0f53f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.ba00a41a";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.be71720e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.d3686ef2";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.ec4774bb";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.f7416ceb";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.f8075bef";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\aavalue.com.1caaee8";"Found Tracking cookie.Aavalue";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\adbrite.com.44f92a69";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\adopt.euroclick.com.891542da";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\questionmarket.com.3eb5a9f1";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\adbrite.com.557c9f74";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\questionmarket.com.4dd5e426";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\questionmarket.com.d4dcb59c";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.27e60b8d";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.44927ec";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\adbrite.com.71beeff9";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\adbrite.com.d5e309c2";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\admarketplace.net.69780f9f";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\adtech.de.a9245469";"Found Tracking cookie.Adtech";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.4fdfee8f";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\bs.serving-sys.com.5bf1f00f";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\realmedia.com.125a868c";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\realmedia.com.68087763";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\realmedia.com.6b2e2a72";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\realmedia.com.964cd308";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.2df99d79";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.50e13b1b";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.6132e6c9";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.73a3e177";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.d14b07f1";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.e9dbeb91";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\realmedia.com.ef906bac";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.f5f26334";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\serving-sys.com.255d6f2f";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\serving-sys.com.400f83f";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\serving-sys.com.4b416ef8";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\serving-sys.com.606c3d3b";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\serving-sys.com.6a1cf9e8";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\serving-sys.com.c9034af6";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tacoda.net.4366831a";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tacoda.net.d323296e";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tacoda.net.e9f57f8";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\trafficmp.com.37644bdb";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\trafficmp.com.a00e30b4";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\trafficmp.com.ae53b8b";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\trafficmp.com.e2e71e33";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\trafficmp.com.f3e5803e";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tribalfusion.com.7610f0e0";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tribalfusion.com.8b22ad8c";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tribalfusion.com.9bc3e98f";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\yieldmanager.com.ce59db3e";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@ad.yieldmanager[1].txt";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.557bf2b0";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.830b6f08";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.8a47878";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.ff92306";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@adrevolver[2].txt";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@adrevolver[2].txt:\adrevolver.com.f6cfcad4";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@advertising[2].txt";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@advertising[2].txt:\advertising.com.1820df7a";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@advertising[2].txt:\advertising.com.525a5fb9";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@advertising[2].txt:\advertising.com.b624fa46";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@advertising[2].txt:\advertising.com.203aa218";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@advertising[2].txt:\advertising.com.f62113d5";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@atdmt[2].txt";"Found Tracking cookie.Atdmt";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@atdmt[2].txt:\atdmt.com.b3e33b5f";"Found Tracking cookie.Atdmt";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@bluestreak[2].txt";"Found Tracking cookie.Bluestreak";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@bluestreak[2].txt:\bluestreak.com.bf396750";"Found Tracking cookie.Bluestreak";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@m.webtrends[1].txt";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@casalemedia[1].txt";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@casalemedia[1].txt:\casalemedia.com.6a12b080";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@casalemedia[1].txt:\casalemedia.com.80ad4799";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@fastclick[1].txt";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@fastclick[1].txt:\fastclick.net.8a6435e9";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@fastclick[1].txt:\fastclick.net.bb8bcae";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@fastclick[1].txt:\fastclick.net.c054072f";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@m.webtrends[1].txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@casalemedia[1].txt:\casalemedia.com.bcb92034";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@mediaplex[1].txt";"Found Tracking cookie.Mediaplex";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@mediaplex[1].txt:\mediaplex.com.f652b123";"Found Tracking cookie.Mediaplex";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@perf.overture[1].txt";"Found Tracking cookie.Overture";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@perf.overture[1].txt:\perf.overture.com.610ef18d";"Found Tracking cookie.Overture";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@questionmarket[1].txt";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@questionmarket[1].txt:\questionmarket.com.3eb5a9f1";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@questionmarket[1].txt:\questionmarket.com.4e513048";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@realmedia[1].txt";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@realmedia[1].txt:\realmedia.com.68087763";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@realmedia[1].txt:\realmedia.com.ef906bac";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@doubleclick[1].txt";"Found Tracking cookie.Doubleclick";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@doubleclick[1].txt:\doubleclick.net.bf396750";"Found Tracking cookie.Doubleclick";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.5935e89";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.c4fe2ebb";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.a3218a37";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.cd7ce44f";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.ed9c50d1";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.23194c51";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.42abf50";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.5660bdd9";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.8852acdc";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.94d192dc";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.ffea4053";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.a6c5ee3c";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.f26d6a3e";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tribalfusion[2].txt";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tribalfusion[2].txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tribalfusion[2].txt:\tribalfusion.com.fd318246";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt";"Found Tracking cookie.Adbrite";"Healed"
"K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\adbrite.com.71beeff9";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\adbrite.com.d5e309c2";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\atdmt.com.b3e33b5f";"Found Tracking cookie.Atdmt";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\casalemedia.com.80ad4799";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\doubleclick.net.1d39bd48";"Found Tracking cookie.Doubleclick";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\tribalfusion.com.fd318246";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt";"Found Tracking cookie.Adbrite";"Healed"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.119d8835";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.1522255c";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.17c1895f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.1969cf0a";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.1aa86b19";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.1fbb16f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.2755766";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.2ce4dba7";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.2e1f9920";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.2ebf85ed";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.35a30809";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.cc77c00b";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.e694783e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.229c30b3";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.59f45125";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.745d8e6f";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.82bb24d8";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.37588d03";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.4a49b844";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.69e1b881";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\qksrv.net.2060efc3";"Found Tracking cookie.Qksrv";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\qksrv.net.3f989311";"Found Tracking cookie.Qksrv";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.43f579ee";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.5511efa5";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.7ff0d86c";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.872c3391";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.8fa3ac0b";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.9039c1dc";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.b821116b";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.ba6eccf2";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.c0865609";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.c522c865";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.3639522a";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.365d03d4";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.38eb5260";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.38ec4d40";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.404851f2";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.41207ad0";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.41406ce9";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.7919062b";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.7fcf04e2";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.92b4d8ae";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.9a95c5ee";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.9f8b156b";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.adc85da";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.d2ffcc1c";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.d3df4663";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.e31bc356";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.e67f3d3d";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.ea235af1";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.f0e2d12f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\ad.yieldmanager.com.830b6f08";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\ad.yieldmanager.com.b4be891c";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.484dbb69";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.4987de69";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.50ba3882";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.5cef2cf7";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.6fe2e494";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.95e64c93";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.ca30b7c8";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.cd523f68";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.d3a20a6e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.9eaabe7c";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.a66c055e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.f57f2f12";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\ad.yieldmanager.com.d1d9eab3";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\ad.yieldmanager.com.e762f029";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adopt.euroclick.com.891542da";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adtech.de.a9245469";"Found Tracking cookie.Adtech";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.af51ae29";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.dc3d664d";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.fc14afc3";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\ad.yieldmanager.com.557bf2b0";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adbrite.com.71beeff9";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adbrite.com.d5e309c2";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adtech.de.d551775e";"Found Tracking cookie.Adtech";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\advertising.com.1820df7a";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adrevolver.com.4a719aa9";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adrevolver.com.ae595d8";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adrevolver.com.f6cfcad4";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\advertising.com.203aa218";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\advertising.com.525a5fb9";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\advertising.com.b624fa46";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\atdmt.com.b3e33b5f";"Found Tracking cookie.Atdmt";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\advertising.com.f62113d5";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\bfast.com.c53c448c";"Found Tracking cookie.Bfast";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\bluestreak.com.bf396750";"Found Tracking cookie.Bluestreak";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\bs.serving-sys.com.5bf1f00f";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\burstnet.com.27341d57";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\burstnet.com.c4fe2ebb";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\casalemedia.com.1def8f2b";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\casalemedia.com.121ba2aa";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\casalemedia.com.1773afc";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\casalemedia.com.5e43734d";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\casalemedia.com.80ad4799";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\casalemedia.com.987e6b46";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\dealtime.com.2a6d70da";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\dealtime.com.48a2428c";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\dealtime.com.a164b0cd";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\dealtime.com.c4a73d85";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\msnportal.112.2o7.net.7225be6f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\dealtime.com.f53eaefc";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\doubleclick.net.bf396750";"Found Tracking cookie.Doubleclick";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\fastclick.net.57e8da10";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\fastclick.net.8a6435e9";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\fastclick.net.bb8bcae";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\hitbox.com.2b95f8a3";"Found Tracking cookie.Hitbox";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\hitbox.com.bbf2a6e8";"Found Tracking cookie.Hitbox";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\media.adrevolver.com.2be00b0";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\media.adrevolver.com.2be00b0";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\questionmarket.com.3eb5a9f1";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.44927ec";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\questionmarket.com.4dd5e426";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.3f4566dd";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.55564293";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.1bfc0218";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.271f5c18";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.d8ade43c";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.f1b6b2e";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\serving-sys.com.255d6f2f";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\serving-sys.com.400f83f";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\serving-sys.com.4b416ef8";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\serving-sys.com.606c3d3b";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\serving-sys.com.6a1cf9e8";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.24a0e3d6";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.2e044bae";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\media.adrevolver.com.539b0606";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\media.adrevolver.com.57f415b5";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\media.adrevolver.com.5fed601d";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\mediaplex.com.323e9a10";"Found Tracking cookie.Mediaplex";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\mediaplex.com.f652b123";"Found Tracking cookie.Mediaplex";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\overture.com.8e32a996";"Found Tracking cookie.Overture";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\realmedia.com.45313e9e";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\realmedia.com.68087763";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\realmedia.com.6b2e2a72";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\realmedia.com.ef906bac";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.2df99d79";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.8d15c3aa";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.a175e6db";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.e9dbeb91";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.edc774d4";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.3e7bc169";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.9b0891e7";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.cd651a15";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.b25dc93a";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.dd7082d2";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.e431917c";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.e1150a02";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\stat.dealtime.com.f58c396a";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.71aedbdb";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.939eb451";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.96b22b2e";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.415c8c3f";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.50ffa7bc";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.7a4c9dcd";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.7d06ed4d";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.9c475c3f";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.af1da3df";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.c8eac4e";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.d5c7c140";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.d5f88925";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.d6059e76";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.d718576c";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.e685680a";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.e3f5ccb7";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.e8352534";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.fff6cf5d";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\tacoda.net.c4fe2ebb";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\tradedoubler.com.eab0972e";"Found Tracking cookie.Tradedoubler";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\yadro.ru.c77afad5";"Found Tracking cookie.Yadro";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\yieldmanager.com.795c98fe";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\zedo.com.775ee79c";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
"K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\zedo.com.c1dd09f2";"Found Tracking cookie.Zedo";"Moved to Virus Vault"

The scan took 4 hours :)
please dont ask me to do it again hahahaha :)
2009-03-24, 16:32
pskelley

Quote:

Could you explain to me why malwarebytes removed my screenshot and deemed it as a rogue spyware remover?

You would have to ask the MBAM creators that question, I use the tool only. You can return anything you wish.
Open MBAM > choose Quarantine > check the item/s you want restored and click Restore.

If you need help controlling cookies, have a look here:
http://www.mvps.org/winhelp2002/cookies.htm
http://www.microsoft.com/windows/ie/...cy/config.mspx

Looks to me like all of the junk is in AVG's Virus Vault...I would wait a few days then clean out that vault. Make sure you empty the Recycle Bin in case AVG moves the junk there.

Quote:

The scan took 4 hours
please dont ask me to do it again hahahaha

When scans take an expectional amount of time, it is usually a hard drive maintenance issue. When did you scan the disk and defrag last?
Defragmenting
http://artsweb.bham.ac.uk/artsit/Inf...ag-win2kxp.htm
Check for Disk Errors in Windows XP
http://www.microsoft.com/windowsxp/u...ips/kbtip.mspx

Let's se if we can wrap up like this:

Remove combofix from the computer like this:

Click START then RUN
Now type or copy Combofix /u in the runbox and click OK.
Note the space between the X and the U, it needs to be there.

http://i189.photobucket.com/albums/z...CF_Cleanup.png

Clean the System Restore files like this:

Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

Reboot

Turn ON System Restore,
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.

Update MBAM and scan to be sure we missed none of the junk, there is no need to post a clean scan result.
(MBAM is yours to keep if you wish, update it and run it once a month or so)

(optional, it's your computer)
Update AVG 8 and scan the system, to be sure it is running right and scanning clean.
(good AVG information)
FAQ: http://www.avg.com/faq
AVG Free Forum: http://freeforum.avg.com/

If all is well at this point, let me know and I will close the topic.

Some good information for you:
http://users.telenet.be/bluepatchy/m...wcomputer.html
http://www.microsoft.com/windowsxp/u...s/mcgill1.mspx

Here is some great information from experts in this field that will help you stay clean and safe online.
http://users.telenet.be/bluepatchy/m...revention.html
http://forums.spybot.info/showthread.php?t=279
http://russelltexas.com/malware/allclear.htm
http://forum.malwareremoval.com/viewtopic.php?t=14
http://www.bleepingcomputer.com/forums/topict2520.html
http://cybercoyote.org/security/not-admin.shtml

http://www.malwarecomplaints.info/

Thanks...pskelley
Safer Networking Forums
http://www.spybot.info/en/donate/index.html
If you are reading this information...thank a teacher,
If you are reading it in English...thank a soldier.

http://users.telenet.be/bluepatchy/m...oes/Links.html
http://www.microsoft.com/windows/ie/...rotection.mspx
Improve the safety of your browsing and e-mail activities
http://www.microsoft.com/protect/com.../browsing.mspx
2009-03-24, 18:51
nikonmikon

Hey, thanks. I didn't really mean to be belligerent about mbam removing the screenshot. I was more curious I guess. Thanks for the information on how to return it from quarantine :)

I believe the scan took 4 hours because I have tons of drives and things. C and D are full windows installs that I have stopped using and those drives are nearly full. They are rather large drives. The higher lettered drives HIJK are partitions of linux that I installed. I use ext2 installable file system for windows to allow me to access those old partitions. I will take your advice by defragging and scanning them. That will probably help quite a bit.

I have started the mbam scan and will do the AVG after. According to the time that past scans have taken, this should be completed at roughly 8:40pm EST.

I will post the outcome at that time. Hopefully they will come up with no bad things.

Seeya at 8. Or whenever you get a chance to reply :)

I would like to thank you for your help. You have been really understanding. A+ helper totally! :2thumb:
2009-03-25, 03:49
nikonmikon

"Scan ""Scan whole computer"" was finished."
"Infections";"17";"17";"0"
"Spyware";"9";"9";"0"
"Folders selected for scanning:";"Scan whole computer"
"Scan started:";"Tuesday, March 24, 2009, 4:57:39 PM"
"Scan finished:";"Tuesday, March 24, 2009, 8:47:43 PM (3 hour(s) 50 minute(s) 3 second(s))"
"Total object scanned:";"1722866"
"User who launched the scan:";"Mike"

"Infections"
"File";"Infection";"Result"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe";"Virus found Win32/Heur";"Deleted"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00100";"Virus found Win32/Heur";"Deleted"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00115";"Virus found Win32/Heur";"Deleted"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00125";"Virus found Win32/Heur";"Deleted"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00133";"Virus found Win32/Heur";"Deleted"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00141";"Virus found Win32/Heur";"Deleted"
"D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00149";"Virus found Win32/Heur";"Deleted"
"D:\Installs\DVD X Copy Platinum\DVDXCopy_Platinum_v4.0.3.8_full_install.exe";"Virus found Win32/Heur";"Deleted"
"D:\Installs\DVD X Copy Platinum\DVDXCopy_Platinum_v4.0.3.8_full_install.exe:\ns_00003";"Virus found Win32/Heur";"Deleted"
"D:\Installs\DVD X Copy Platinum\DVDXCopy_Platinum_v4.0.3.8_full_install.exe:\ns_00004";"Virus found Win32/Heur";"Deleted"
"D:\Installs\DVD X Copy Platinum\DVDXCopy_Platinum_v4.0.3.8_full_install.exe:\ns_00018";"Virus found Win32/Heur";"Deleted"
"D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe";"Virus found Win32/Heur";"Deleted"
"D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00005";"Virus found Win32/Heur";"Deleted"
"D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00015";"Virus found Win32/Heur";"Deleted"
"D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00018";"Virus found Win32/Heur";"Deleted"
"D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00021";"Virus found Win32/Heur";"Deleted"
"D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00030";"Virus found Win32/Heur";"Deleted"

"Spyware"
"File";"Infection";"Result"
"C:\Documents and Settings\MikeyMike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar";"Potentially harmful program HackTool.crack";"Deleted"
"C:\Documents and Settings\MikeyMike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.Standalone.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Deleted"
"C:\Documents and Settings\MikeyMike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.VSTi.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Deleted"
"E:\Documents and Settings\Mike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar";"Potentially harmful program HackTool.crack";"Deleted"
"E:\Documents and Settings\Mike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.Standalone.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Deleted"
"E:\Documents and Settings\Mike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.VSTi.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Deleted"
"H:\temporary storage\Desktop Storage\my webspace\jupiter\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar";"Potentially harmful program HackTool.crack";"Deleted"
"H:\temporary storage\Desktop Storage\my webspace\jupiter\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.Standalone.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Deleted"
"H:\temporary storage\Desktop Storage\my webspace\jupiter\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.VSTi.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Deleted"

What do you make of this? :)

Malwarebytes returned nothing bad.
2009-03-25, 10:58
pskelley

My advice is that you delete each of those files from the computer and make sure you empty the Recycle Bin after that is done.

Thanks
2009-03-25, 18:06
nikonmikon

Quote:

Originally Posted by pskelley

My advice is that you delete each of those files from the computer and make sure you empty the Recycle Bin after that is done.

Thanks

Okay done deal. I already did exactly that. :)

Is this ordeal finally over? if so, thank you pskelley so much for helping me. You were really patient and very accommodating. I am very grateful. :present: :2thumb::bow: