Page 1 of 2 12 LastLast
Results 1 to 10 of 13

Thread: help with vmondo and spywareremover2009

  1. 2009-03-22, 15:22 #1
    nikonmikon
    nikonmikon is offline
    Junior Member
    Join Date
    Mar 2009
    Posts
    8

    Default help with vmondo and spywareremover2009

    Hi. I keep getting a popup for Spyware Remover 2009



    I did a HJT scan but I ran combofix after. I didn't realize that I shouldn't have. Thankfully I did do the HJT scan before so that can help you guys. I did not run anything else after combofix and that is where I am in the current timeframe of things (ran hjt, ran combofix-system rebooted, i'm posting here) I apologize for doing that. Hopefully I can still receive some help?

    I did a little research and I don't think I actually have Spyware Remover 2009 based on removal instructions because none of the files and locations exist (program files and so on) but I do think I have vmondo maybe.

    HJT log I created before running combofix follows:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 7:54:44 AM, on 3/22/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    E:\WINDOWS\System32\smss.exe
    E:\WINDOWS\system32\winlogon.exe
    E:\WINDOWS\system32\services.exe
    E:\WINDOWS\system32\lsass.exe
    E:\WINDOWS\system32\svchost.exe
    E:\WINDOWS\System32\svchost.exe
    E:\WINDOWS\system32\spoolsv.exe
    E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    E:\Program Files\Java\jre6\bin\jqs.exe
    E:\WINDOWS\system32\nvsvc32.exe
    E:\WINDOWS\system32\PnkBstrA.exe
    E:\WINDOWS\system32\PnkBstrB.exe
    E:\WINDOWS\system32\svchost.exe
    E:\WINDOWS\CTHELPER.EXE
    E:\WINDOWS\explorer.exe
    E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    E:\Install Files\HJT\HijackThis.exe

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {4eed181e-157c-498e-878f-c73c6993be3c} - E:\WINDOWS\system32\yarawafi.dll
    O2 - BHO: {1bbde8e7-27ed-1beb-9fb4-10cfe6f3bfe6} - {6efb3f6e-fc01-4bf9-beb1-de727e8edbb1} - E:\WINDOWS\system32\pdeitl.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O4 - HKLM\..\Run: [CTSysVol] E:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
    O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [IMJPMIG8.1] "E:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [MSPY2002] E:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
    O4 - HKLM\..\Run: [PHIME2002ASync] E:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] E:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
    O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
    O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "E:\Program Files\RivaTuner v2.22\RivaTuner.exe" /S
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [bidaruwemu] Rundll32.exe "E:\WINDOWS\system32\giyabovi.dll",s
    O4 - HKLM\..\Run: [e421d4f4] rundll32.exe "E:\WINDOWS\system32\sosobedu.dll",b
    O4 - HKLM\..\Run: [CPM27ce1674] Rundll32.exe "E:\WINDOWS\system32\januzesi.dll",a
    O4 - HKCU\..\Run: [CGFLoader] E:\Program Files\Calibrize\CalibrizeLoader.exe
    O4 - HKCU\..\Run: [CalibrizeResume] E:\Program Files\Calibrize\CalibrizeResume.exe
    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [SetDefaultMIDI] MIDIDEF.EXE /s:'Creative SoundFont Synthesizer' /w:'SB Audigy' (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [SetDefaultMIDI] MIDIDEF.EXE /s:'Creative SoundFont Synthesizer' /w:'SB Audigy' (User 'Default user')
    O4 - Global Startup: allSnap.lnk = E:\Program Files\allSnap\allSnap.exe
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - E:\Program Files\AIM\aim.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
    O17 - HKLM\System\CCS\Services\Tcpip\..\{22B46FF2-FFF9-4851-9A1A-2A8226640CC0}: NameServer = 208.180.42.100,208.180.42.68
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4F90DBE3-2648-4ED3-AB5F-3DE6DCF7642C}: NameServer = 208.180.42.100,208.180.42.68
    O20 - AppInit_DLLs: E:\WINDOWS\system32\kokidine.dll pdeitl.dll e:\windows\system32\vuzupeno.dll e:\windows\system32\januzesi.dll
    O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - e:\windows\system32\januzesi.dll
    O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - e:\windows\system32\januzesi.dll
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: npkcmsvc - Unknown owner - H:\Program Files\Nexon\npkcmsvc.exe (file missing)
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: PACSPTISVR - Unknown owner - E:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: PnkBstrA - Unknown owner - E:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: PnkBstrB - Unknown owner - E:\WINDOWS\system32\PnkBstrB.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - E:\Program Files\WinPcap\rpcapd.exe
    O23 - Service: SonicStage Back-End Service - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

    --
    End of file - 6956 bytes


    Please definitely let me know if you want me to post the subsequent combofix log.

    Again sorry for running combofix afterwards.

    An update: I noticed that Internet Explorer was defaulted to my system browser now. Google Chrome has been my default browser for a very long time and I'm not sure if combofix did this or not. I have changed it back to Chrome for the time being.
  2. 2009-03-22, 20:32 #2
    pskelley
    pskelley is offline
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247

    Default

    Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
    "BEFORE you POST" (READ this Procedure before Requesting Assistance) http://forums.spybot.info/showthread.php?t=288
    All advice given is taken at your own risk.
    Please make sure you have read this information so we are on the same page.

    Make sure you read and follow the directions, anything else will slow the process and waste both of our time. I suggest you keep this computer offline except when troubleshooting, the junk may download more. If you have any tool I use, delete it and download it new from the link I provide. Read and follow the directions carefully, the tools will not work unless you do.
    The junk can be tough to remove, so do not expect fast or easy.

    Pinned (sticky) to the top of this forum, and posted above are the directions, make sure you have read and followed them.

    1) First question...I run AVG 8 free myself and to my knowledge, AVG 7 is out of date. Why are you running an out of date antivirus program.

    2) Be 100% positive you read those directions, HijackThis is located unsafely and not where the instructions say? Follow these directions:

    Download Trend Micro Hijack This™ to your Desktop
    http://download.bleepingcomputer.com...HJTInstall.exe
    Doubleclick the HJTInstall.exe to start it.
    By default it will install HijackThis in the Program Files\Trendmicro folder and create a desktop shortcut.
    HijackThis will open after install. Press the Scan button below.
    This will start the scan and open a log. <<< close HJT until I ask for a log later.

    3) Please DO NOT ENABLE Spybot S&D TeaTimer while we work together.

    4) A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own. This tool is not a toy and not for everyday use

    Download ComboFix from here:

    Link 1

    * IMPORTANT !!! Save ComboFix.exe to your Desktop

    • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
    • See this Link for programs that need to be disabled and instruction on how to disable them.
    • Remember to re-enable them when we're done.

    • Double click on ComboFix.exe & follow the prompts.
    • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
    • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.


    **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


    Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

    Click on Yes, to continue scanning for malware.

    When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply along with a New Hijackthis log.

    *If there is no internet connection when Combofix has completely finished then restart your computer to restore back the connections.

    Tutorial if needed
    http://www.bleepingcomputer.com/comb...o-use-combofix

    5) Post also an uninstall list: Open Hijackthis.
    Click the "Open the Misc Tools" section Button.
    Click the "Open Uninstall Manager" Button.
    Click the "Save list..." Button.
    Save it to your desktop. Copy and paste the contents into your reply.
    (You may edit out Microsoft, Hotfixes, Security Update for Windows XP,
    Update for Windows XP and Windows XP Hotfix to shorten the list    )
    Image: http://img.bleepingcomputer.com/tuto...nstall-man.jpg

    Thanks
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006
  3. 2009-03-23, 02:30 #3
    nikonmikon
    nikonmikon is offline
    Junior Member
    Join Date
    Mar 2009
    Posts
    8

    Default

    1: I didn't want to run 8 because it seemed to be more resource intensive but, I will install it after this.

    2: I put HJT in the location it was in manually.

    3: I do not believe I have TeaTimer loaded and I will continue to keep it that way for you

    4: Ok


    Here is the combofix log:
    ComboFix 09-03-22.01 - Mike 2009-03-22 20:12:37.2 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.3326.2880 [GMT -5:00]
    Running from: e:\documents and settings\Mike\Desktop\ComboFix.exe
    AV: AVG 7.5.557 *On-access scanning disabled* (Updated)
    * Created a new restore point
    .

    ((((((((((((((((((((((((( Files Created from 2009-02-23 to 2009-03-23 )))))))))))))))))))))))))))))))
    .

    2009-03-22 20:05 . 2009-03-22 20:05 <DIR> d-------- e:\program files\Trend Micro
    2009-03-22 13:18 . 2009-03-22 13:18 <DIR> d-------- e:\program files\tuxguitar-1.0
    2009-03-22 13:18 . 2009-03-22 13:22 <DIR> d-------- e:\documents and settings\Mike\.tuxguitar-1.0
    2009-03-19 22:49 . 2009-03-20 18:00 <DIR> d-------- e:\program files\REAPER
    2009-03-19 22:49 . 2009-03-20 18:02 <DIR> d-------- e:\documents and settings\Mike\Application Data\REAPER
    2009-03-19 11:02 . 2009-03-19 11:02 16 --a------ e:\windows\system32\w3data.vss
    2009-03-19 11:02 . 2009-03-19 11:02 16 --a------ e:\windows\msocreg32.dat
    2009-03-19 10:43 . 2009-03-19 10:43 <DIR> d-------- e:\program files\Vstplugins
    2009-03-19 10:43 . 2009-03-19 10:43 <DIR> d-------- e:\program files\Sonoma Wire Works
    2009-03-19 10:43 . 2009-03-19 10:43 <DIR> d-------- e:\program files\IK Multimedia
    2009-03-19 10:43 . 2009-03-19 10:43 <DIR> d-------- e:\documents and settings\All Users\Application Data\Sonoma Wire Works
    2009-03-11 20:33 . 2004-08-04 07:00 221,184 --a------ e:\windows\system32\wmpns.dll
    2009-03-10 19:53 . 2004-08-04 00:56 159,232 --a------ e:\windows\system32\ptpusd.dll
    2009-03-10 19:53 . 2004-08-03 22:58 15,104 --a------ e:\windows\system32\drivers\usbscan.sys
    2009-03-10 19:53 . 2004-08-03 22:58 15,104 --a--c--- e:\windows\system32\dllcache\usbscan.sys
    2009-03-10 19:53 . 2001-08-17 22:36 5,632 --a------ e:\windows\system32\ptpusb.dll
    2009-03-04 02:42 . 2009-03-13 03:56 189,072 --a------ e:\windows\system32\PnkBstrB.xtr

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-03-22 20:38 --------- d-----w e:\documents and settings\Mike\Application Data\Skype
    2009-03-22 20:38 --------- d-----w e:\documents and settings\Mike\Application Data\.purple
    2009-03-22 13:53 --------- d-----w e:\documents and settings\Mike\Application Data\gtk-2.0
    2009-03-22 12:50 --------- d-----w e:\documents and settings\Mike\Application Data\AVG7
    2009-03-21 20:54 --------- d-----w e:\program files\Steam
    2009-03-21 12:27 --------- d-----w e:\documents and settings\Mike\Application Data\OpenOffice.org2
    2009-03-16 02:48 --------- d-----w e:\program files\Spybot - Search & Destroy
    2009-03-13 08:56 189,072 ----a-w e:\windows\system32\PnkBstrB.exe
    2009-03-13 08:01 138,920 ----a-w e:\windows\system32\drivers\PnkBstrK.sys
    2009-03-12 19:21 --------- d-----w e:\documents and settings\Mike\Application Data\Azureus
    2009-03-12 02:18 --------- d-----w e:\program files\Azureus
    2009-03-08 08:25 --------- d-----w e:\documents and settings\Mike\Application Data\X-Chat 2
    2009-03-04 07:20 75,064 ----a-w e:\windows\system32\PnkBstrA.exe
    2009-02-24 07:16 --------- d-----w e:\documents and settings\Mike\Application Data\dvdcss
    2009-02-09 10:19 1,846,272 ----a-w e:\windows\system32\win32k.sys
    2009-02-06 09:51 --------- d-----w e:\program files\MagicISO
    2009-02-06 03:51 --------- d-----w e:\program files\PowerISO
    2009-02-04 11:38 --------- d-----w e:\program files\megui
    2009-02-04 00:04 --------- d-----w e:\program files\Sonic Foundry
    2009-02-04 00:04 --------- d-----w e:\program files\Pure Motion
    2009-02-04 00:04 --------- d-----w e:\program files\DebugMode
    2009-02-03 16:41 --------- d-----w e:\program files\palmOne
    2009-02-03 03:09 368,640 ----a-w e:\windows\system32\ReWire.dll
    2009-01-24 05:26 --------- d-----w e:\program files\Common Files\Wise Installation Wizard
    2009-01-24 05:26 --------- d-----w e:\documents and settings\All Users\Application Data\nView_Profiles
    2009-01-23 20:47 --------- d-----w e:\program files\AGEIA Technologies
    2009-01-17 13:57 22,328 ----a-w e:\documents and settings\Mike\Application Data\PnkBstrK.sys
    2009-01-17 13:57 2,337,865 ----a-w e:\windows\system32\pbsvc.exe
    2008-12-26 06:08 453,152 ----a-w e:\windows\system32\nvudisp.exe
    2008-12-24 03:58 453,152 ----a-w e:\windows\system32\NVUNINST.EXE
    .

    ((((((((((((((((((((((((((((( SnapShot@2009-03-22_ 8.30.54.04 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2009-03-22 21:32:48 16,384 ----atw e:\windows\Temp\Perflib_Perfdata_6d0.dat
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CGFLoader"="e:\program files\Calibrize\CalibrizeLoader.exe" [2007-11-26 1961984]
    "CalibrizeResume"="e:\program files\Calibrize\CalibrizeResume.exe" [2007-11-26 413696]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTSysVol"="e:\program files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe" [2002-10-29 49152]
    "AVG7_CC"="e:\progra~1\Grisoft\AVG7\avgcc.exe" [2009-02-24 590848]
    "IMJPMIG8.1"="e:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952]
    "MSPY2002"="e:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 59392]
    "PHIME2002ASync"="e:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
    "PHIME2002A"="e:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
    "RivaTunerStartupDaemon"="e:\program files\RivaTuner v2.22\RivaTuner.exe" [2008-12-29 2732032]
    "NvCplDaemon"="e:\windows\system32\NvCpl.dll" [2009-01-15 13680640]
    "NvMediaCenter"="e:\windows\system32\NvMcTray.dll" [2009-01-15 86016]
    "CTHelper"="CTHELPER.EXE" [2006-08-11 e:\windows\CTHELPER.EXE]
    "CTxfiHlp"="CTXFIHLP.EXE" [2006-08-11 e:\windows\system32\CTXFIHLP.EXE]
    "nwiz"="nwiz.exe" [2009-01-15 e:\windows\system32\nwiz.exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "AVG7_Run"="e:\progra~1\Grisoft\AVG7\avgw.exe" [2008-02-14 219136]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    "SetDefaultMIDI"="MIDIDEF.EXE" [2006-08-11 e:\windows\MIDIDEF.EXE]

    e:\documents and settings\All Users\Start Menu\Programs\Startup\
    allSnap.lnk - e:\program files\allSnap\allSnap.exe [2008-01-17 90112]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "msacm.ac3filter"= ac3filter.acm
    "VIDC.D263"= xl_x263dec.dll

    [HKLM\~\startupfolder\E:^Documents and Settings^Mike^Start Menu^Programs^Startup^allSnap.lnk]
    path=e:\documents and settings\Mike\Start Menu\Programs\Startup\allSnap.lnk
    backup=e:\windows\pss\allSnap.lnkStartup

    [HKLM\~\startupfolder\E:^Documents and Settings^Mike^Start Menu^Programs^Startup^Sprint media monitor.lnk]
    path=e:\documents and settings\Mike\Start Menu\Programs\Startup\Sprint media monitor.lnk
    backup=e:\windows\pss\Sprint media monitor.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    --a------ 2007-10-10 22:51 39792 e:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileZilla Server Interface]
    --a------ 2008-11-10 11:35 942080 e:\program files\FileZilla Server\FileZilla Server Interface.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
    --a----t- 2008-09-04 14:21 133104 e:\documents and settings\Mike\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NNma]
    --a------ 2008-05-26 23:47 999479 e:\program files\NNsquad\nnma.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteCenter]
    --a------ 2002-11-21 12:33 135168 e:\program files\Creative\MediaSource\RemoteControl\RcMan.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SBDrvDet]
    --a------ 2002-12-03 21:06 45056 e:\program files\Creative\SB Drive Det\SBDrvDet.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    --a------ 2008-09-29 14:12 144792 e:\program files\Java\jre6\bin\jusched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]
    --------- 2000-05-11 04:00 90112 e:\windows\Updreg.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTHelper]
    --a------ 2006-08-11 17:56 17920 e:\windows\CTHELPER.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTxfiHlp]
    --a------ 2006-08-11 17:56 18944 e:\windows\system32\CTXFIHLP.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "AresChatServer"=3 (0x3)

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "UpdatesDisableNotify"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "e:\\Program Files\\Pidgin\\pidgin.exe"=
    "e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\counter-strike source\\hl2.exe"=
    "e:\\Program Files\\EA GAMES\\Battlefield 2\\BF2.exe"=
    "e:\\Program Files\\Ares\\Ares.exe"=
    "e:\\Program Files\\Electronic Arts\\Battlefield 2142\\BF2142.exe"=
    "c:\\Install Files\\Nesticle\\nesticle\\NESTCL95.EXE"=
    "e:\\Program Files\\Mozilla Firefox\\firefox.exe"=
    "c:\\Program Files\\xchat\\xchat.exe"=
    "e:\\Program Files\\FileZilla FTP Client\\filezilla.exe"=
    "e:\\Program Files\\Azureus\\Azureus.exe"=
    "e:\\Program Files\\AIM\\aim.exe"=
    "e:\\Program Files\\Grisoft\\AVG7\\avginet.exe"=
    "e:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"=
    "e:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"=
    "e:\\Program Files\\Winamp\\winamp.exe"=
    "e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\source sdk base\\hl2.exe"=
    "e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\team fortress 2\\hl2.exe"=
    "e:\\Program Files\\Steam\\Steam.exe"=
    "e:\\Program Files\\Codemasters\\GRID Demo\\GRID.exe"=
    "e:\\Program Files\\NNsquad\\nnma.exe"=
    "e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\half-life 2 deathmatch\\hl2.exe"=
    "e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\day of defeat source beta\\hl2.exe"=
    "e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\day of defeat source\\hl2.exe"=
    "e:\\Program Files\\RealVNC\\VNC4\\winvnc4.exe"=
    "e:\\Program Files\\Electronic Arts\\Crytek\\Crysis SP Demo\\Bin32\\Crysis.exe"=
    "e:\\Program Files\\Java\\jre1.6.0_07\\bin\\java.exe"=
    "e:\\Program Files\\Steam\\steamapps\\mykeymyke@flashmail.com\\insurgency\\hl2.exe"=
    "e:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
    "e:\\WINDOWS\\system32\\PnkBstrA.exe"=
    "e:\\WINDOWS\\system32\\PnkBstrB.exe"=
    "h:\\Program Files\\Activision\\Call of Duty - World at War Beta\\CoDWaWbeta.exe"=
    "e:\\Program Files\\RealVNC\\VNC4\\vncviewer.exe"=
    "e:\\WINDOWS\\system32\\sessmgr.exe"=
    "e:\\Program Files\\SPRINT_WTK_331\\bin\\zayit.exe"=
    "e:\\Program Files\\NetMeeting\\conf.exe"=
    "e:\\Program Files\\FileZilla Server\\FileZilla Server Interface.exe"=
    "e:\\Program Files\\Steam\\steamapps\\common\\rainbow six vegas 2\\Binaries\\RainbowSixVegas2_SADS.exe"=
    "e:\\Program Files\\Steam\\steamapps\\common\\call of duty 4\\iw3sp.exe"=
    "e:\\Program Files\\Steam\\steamapps\\common\\call of duty 4\\iw3mp.exe"=
    "e:\\Program Files\\Steam\\steamapps\\common\\rainbow six vegas 2\\Binaries\\R6Vegas2_Game.exe"=
    "e:\\Program Files\\Java\\jre6\\bin\\java.exe"=
    "e:\\Program Files\\Steam\\steamapps\\common\\left 4 dead\\left4dead.exe"=
    "e:\\WINDOWS\\system32\\taskmgr.exe"=
    "e:\\Program Files\\Skype\\Phone\\Skype.exe"=

    R0 SiWinAcc;SiWinAcc;e:\windows\system32\drivers\SiWinAcc.sys [2008-12-18 10368]
    R1 Ext2fs;Ext2fs;e:\windows\system32\drivers\ext2fs.sys [2008-01-31 179584]
    R1 IfsMount;IfsMount;e:\windows\system32\drivers\ifsmount.sys [2008-01-31 49536]
    R3 ctgame;Game Port;e:\windows\system32\drivers\ctgame.sys [2002-12-30 12160]
    R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;e:\windows\system32\drivers\libusb0.sys [2008-01-26 33792]
    R3 XIRLINK;IBM PC Camera;e:\windows\system32\drivers\C-itNT.sys [2008-06-03 899884]
    S3 L6PODP;PODxt Pro Service;e:\windows\system32\drivers\L6PODP.sys [2008-02-01 514432]
    S3 NPF;NetGroup Packet Filter Driver;e:\windows\system32\drivers\npf.sys [2007-06-28 42512]
    S3 RTLWUSB;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter;e:\windows\system32\drivers\RTL8187.sys [2008-01-18 176128]
    S4 libusbd;LibUsb-Win32 - Daemon, Version 0.1.10.1;system32\libusbd-nt.exe --> system32\libusbd-nt.exe [?]
    .
    Contents of the 'Scheduled Tasks' folder

    2009-03-22 e:\windows\Tasks\GoogleUpdateTaskUser.job
    - e:\documents and settings\Mike\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-09-04 14:21]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.google.com/
    Trusted Zone: aol.com\free
    TCP: {22B46FF2-FFF9-4851-9A1A-2A8226640CC0} = 208.180.42.100,208.180.42.68
    TCP: {4F90DBE3-2648-4ED3-AB5F-3DE6DCF7642C} = 208.180.42.100,208.180.42.68
    FF - ProfilePath - e:\documents and settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
    FF - plugin: e:\documents and settings\Mike\Local Settings\Application Data\Google\Update\1.2.131.11\npGoogleOneClick5.dll
    .

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-03-22 20:15:44
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    CTHelper = CTHELPER.EXE?
    CTxfiHlp = CTXFIHLP.EXE?

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_USERS\S-1-5-21-1659004503-842925246-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{82AB9FC8-8997-ED70-382E-4F4506F407C3}*]
    @Allowed: (Read) (RestrictedCode)
    @Allowed: (Read) (RestrictedCode)
    .
    Completion time: 2009-03-22 20:21:35
    ComboFix-quarantined-files.txt 2009-03-23 01:20:28
    ComboFix2.txt 2009-03-22 13:32:38

    Pre-Run: 14,542,528,512 bytes free
    Post-Run: 14,531,125,248 bytes free

    218 --- E O F --- 2009-03-14 02:23:17



    here is the HJT log:
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 8:07:25 PM, on 3/22/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    E:\WINDOWS\System32\smss.exe
    E:\WINDOWS\system32\winlogon.exe
    E:\WINDOWS\system32\services.exe
    E:\WINDOWS\system32\lsass.exe
    E:\WINDOWS\system32\svchost.exe
    E:\WINDOWS\System32\svchost.exe
    E:\WINDOWS\system32\spoolsv.exe
    E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    E:\Program Files\Java\jre6\bin\jqs.exe
    E:\WINDOWS\system32\nvsvc32.exe
    E:\WINDOWS\system32\HPZipm12.exe
    E:\WINDOWS\system32\PnkBstrA.exe
    E:\WINDOWS\system32\PnkBstrB.exe
    E:\WINDOWS\system32\svchost.exe
    E:\WINDOWS\system32\wscntfy.exe
    E:\WINDOWS\Explorer.EXE
    E:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
    E:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    E:\WINDOWS\CTHELPER.EXE
    E:\WINDOWS\system32\RUNDLL32.EXE
    E:\Program Files\Calibrize\CalibrizeResume.exe
    E:\Program Files\allSnap\allSnap.exe
    E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    E:\Documents and Settings\Mike\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    E:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O4 - HKLM\..\Run: [CTSysVol] E:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
    O4 - HKLM\..\Run: [AVG7_CC] E:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [IMJPMIG8.1] "E:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [MSPY2002] E:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
    O4 - HKLM\..\Run: [PHIME2002ASync] E:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] E:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
    O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
    O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "E:\Program Files\RivaTuner v2.22\RivaTuner.exe" /S
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKCU\..\Run: [CGFLoader] E:\Program Files\Calibrize\CalibrizeLoader.exe
    O4 - HKCU\..\Run: [CalibrizeResume] E:\Program Files\Calibrize\CalibrizeResume.exe
    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [SetDefaultMIDI] MIDIDEF.EXE /s:'Creative SoundFont Synthesizer' /w:'SB Audigy' (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [SetDefaultMIDI] MIDIDEF.EXE /s:'Creative SoundFont Synthesizer' /w:'SB Audigy' (User 'Default user')
    O4 - Global Startup: allSnap.lnk = E:\Program Files\allSnap\allSnap.exe
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - E:\Program Files\AIM\aim.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
    O17 - HKLM\System\CCS\Services\Tcpip\..\{22B46FF2-FFF9-4851-9A1A-2A8226640CC0}: NameServer = 208.180.42.100,208.180.42.68
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4F90DBE3-2648-4ED3-AB5F-3DE6DCF7642C}: NameServer = 208.180.42.100,208.180.42.68
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: npkcmsvc - Unknown owner - H:\Program Files\Nexon\npkcmsvc.exe (file missing)
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: PACSPTISVR - Unknown owner - E:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: PnkBstrA - Unknown owner - E:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: PnkBstrB - Unknown owner - E:\WINDOWS\system32\PnkBstrB.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - E:\Program Files\WinPcap\rpcapd.exe
    O23 - Service: SonicStage Back-End Service - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

    --
    End of file - 6295 bytes
  4. 2009-03-23, 11:04 #4
    pskelley
    pskelley is offline
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247

    Default

    AVG 8: Thanks for waiting until you are clean of malware, then I will post information to make the transition easier and a tutorial to save some resources.

    Please read the instructions carefully, the uninstall list requested in instruction #5 is not posted...that's a lot of information to miss. Please post the uninstall list as soon as you have it.

    e:\program files\Azureus <<< all p2p programs must be uninstalled.
    http://forums.spybot.info/showthread.php?t=282
    If your helper detects the presence of such programs on your computer he/she will ask you to remove them. Help will be withdrawn should you not agree to their removal.
    Mike, malware that was in the first HJT log is not in the second HJT log, in fact this scan: Scan saved at 8:07:25 PM, on 3/22/2009
    appears clean. Either I am not seeing the combofix log that removed it or another tool was run prior to posting the last HJT log? Let's clean and get a second opinion.

    Please download ATF Cleaner by Atribune
    http://www.atribune.org/public-beta/ATF-Cleaner.exe
    Save it to your Desktop. Run ATF Cleaner
    Double-click ATF-Cleaner.exe to run the program.
    Click Select All found at the bottom of the list.
    Click the Empty Selected button.
    Click Exit on the Main menu to close the program.

    *Cleaning Prefetch may result in a few slow starts until the folder is repopulated:
    http://www.windowsnetworking.com/art...efetch-XP.html

    Download Malwarebytes' Anti-Malware to your Desktop
    http://www.malwarebytes.org/

    * Double-click mbam-setup.exe and follow the prompts to install the program.
    * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    * If an update is found, it will download and install the latest version.
    * Once the program has loaded, select Perform FULL SCAN, then click Scan.
    * When the scan is complete, click OK, then Show Results to view the results.
    * Be sure that everything is checked, and click Remove Selected.
    * When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt
    * Please post contents of that file & a new HJT log in your next reply.

    Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

    Tutorial if needed:
    http://www.techsupportteam.org/forum...ware-mbam.html

    How is the computer running, any malware issues?

    Thanks...Phil
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006
  5. 2009-03-23, 19:08 #5
    nikonmikon
    nikonmikon is offline
    Junior Member
    Join Date
    Mar 2009
    Posts
    8

    Default

    On AVG 8: No problem. I know it would make no sense to install it now because it could be compromised by anything with retrovirus tendencies.

    I totally missed instruction #5. My mistake! There was a lot to read

    I will uninstall Azureus as per your request

    I ran HJT then Combofix. Then you told me to install another HJT and run it then run Combofix again and post each subsequent log. So you saw my first HJT, then your HJT then your Combofix log. I did not post the Combofix log that I created by running it before getting help from you. I dont think it exists anymore either because the 2nd running removed it? :(

    Ran hjt before your help > log provided in 1st post
    Ran cfix before your help> log was not provided
    ========decided to post a thread==============
    Ran HJT per your request > log provided in 2nd post
    Ran Cfix per your request > log provided in 2nd post

    Hope that clears up the timeline a little. This pc is disconnected from the internet except when required to do your requests to keep down on any infections that could occur.

    here is the uninstall list:
    7-Zip 4.57
    AC3Filter (remove only)
    Adobe Flash Player 10 Plugin
    Adobe Flash Player ActiveX
    Adobe Reader 8.1.1
    Adobe Shockwave Player 11
    AFPL Ghostscript 8.54
    AFPL Ghostscript Fonts
    allSnap version 1.33.2
    AOL Instant Messenger
    ASUS WiFi-AP Solo
    ASUSUpdate
    Audiosurf
    AVG 7.5
    AVG Anti-Rootkit Free
    Battlefield 2(TM)
    Battlefield 2142
    BitPim 1.0.6
    Calibrize 2.0
    Call of Duty 4: Modern Warfare
    Call of Duty(R) - World at War(TM) Beta
    Call of Duty(R) 4 - Modern Warfare(TM) Demo
    Comical 0.8
    Cool & Quiet
    Counter-Strike: Source
    Creative Audio Console
    Creative MediaSource
    Critical Update for Windows Media Player 11 (KB959772)
    Crysis(R) SP Demo
    Day of Defeat: Source Beta
    DebugMode Wax 2.0
    Digsby
    DivX Codec
    DivX Converter
    DivX Player
    DivX Web Player
    Eraser
    Ext2 IFS 1.11 for Windows XP
    FastStone Image Viewer 3.6
    FileZilla Client 3.2.0
    FileZilla Server (remove only)
    Fraps
    Gimp 2.6.0
    GRID Demo
    GTK+ Runtime 2.14.6 rev a (remove only)
    Guitar Pro 5.0
    Half-Life 2
    Half-Life 2: Deathmatch
    Hamachi 1.0.3.0
    HijackThis 2.0.2
    I-Fluid 1.0
    InfraRecorder
    Inkscape 0.46
    Insurgency
    IrfanView (remove only)
    J2SE Runtime Environment 5.0 Update 11
    Japanese Fonts Support For Adobe Reader 8
    Java(TM) 6 Update 10
    Java(TM) 6 Update 7
    KeyTweak - Keyboard Remapper (remove only)
    Left 4 Dead
    LibUSB-Win32-0.1.10.1
    Line 6 Drivers 3.3.3.6 (Remove Only)
    Line 6 Edit (remove only)
    Line 6 Monkey 1.21 (Remove Only)
    Magic ISO Maker v5.5 (build 0273)
    MapleStory
    MeGUI modern media encoder (remove only)
    Microsoft .NET Framework 2.0 Service Pack 1
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Windows XP Video Decoder Checkup Utility
    Mozilla Firefox (3.0.7)
    Network Measurement Agent
    NVIDIA Drivers
    NVIDIA ForceWare Network Access Manager
    NVIDIA PhysX
    OpenAL
    OpenMG Limited Patch 4.7-07-14-05-01
    OpenMG Secure Module 4.7.00
    OpenOffice.org 2.3
    OpenSSL 0.9.8g
    Palm Desktop
    PC Probe II
    Phun beta 3.5
    Pidgin
    Portal
    PowerISO
    PunkBuster Services
    QPST
    Rainbow Six Vegas 2
    REAPER
    RiffWorks T4
    RivaTuner v2.22
    SAMSUNG Mobile Composite Device Software
    Samsung Mobile phone USB driver Software
    SAMSUNG Mobile USB Modem 1.0 Software
    SAMSUNG Mobile USB Modem Software
    Security Update for Windows Media Encoder (KB954156)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows Media Player 9 (KB936782)
    Skype 3.1
    SonicStage 4.3
    Sound Blaster Audigy 2
    Source SDK Base
    Sprint media manager
    Sprint Wireless Toolkit 3.3.1 - Powered by Sun Java Technology
    Spybot - Search & Destroy
    Stacker Blocks 3D
    Steam
    System Requirements Lab
    Team Fortress 2
    TeamSpeak 2 RC2
    TuxGuitar
    Viewpoint Media Player
    VLC media player 0.9.6
    VNC Free Edition 4.1.2
    VobSub v2.23 (Remove Only)
    VTFEdit 1.2.5
    Waves Mercury Complete VST DX RTAS v1.01
    Winamp
    Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
    Windows Imaging Component
    Windows Installer 3.1 (KB893803)
    Windows Media Encoder 9 Series
    Windows Media Encoder 9 Series
    Windows Media Format 11 runtime
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows Media Player 11
    WinPcap 4.0.1
    Yahoo! Messenger

    I have run ATF Cleaner the way you instructed.

    Here is the malwarebytes log:
    Malwarebytes' Anti-Malware 1.34
    Database version: 1888
    Windows 5.1.2600 Service Pack 2

    3/23/2009 12:46:56 PM
    mbam-log-2009-03-23 (12-46-56).txt

    Scan type: Full Scan (C:\|D:\|E:\|H:\|I:\|J:\|K:\|)
    Objects scanned: 779303
    Time elapsed: 3 hour(s), 27 minute(s), 23 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 4
    Registry Values Infected: 0
    Registry Data Items Infected: 1
    Folders Infected: 0
    Files Infected: 3

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx (Adware.Minibug) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx.1 (Adware.Minibug) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{04a38f6b-006f-4247-ba4c-02a139d5531c} (Adware.Minibug) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{3c2d2a1e-031f-4397-9614-87c932a848e0} (Adware.Minibug) -> Quarantined and deleted successfully.

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    E:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll (Adware.Minibug) -> Quarantined and deleted successfully.
    C:\Install Files\vegas\Keygen\keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    E:\Documents and Settings\Mike\Desktop\spywareremover2k9.jpg (Rogue.Spyware.Remover) -> Quarantined and deleted successfully.

    I don't understand why the jpg screenshot I created is a 'rogue spyware remover' according to malwarebytes? I made that file and named it that.... anything infected from the C: is not really relevant because I do not run or use any applications on that drive.

    The computer runs good, but it is disconnected from the internet so there's no real telling yet. For the times it was connected however, it ran good. I may have found the first combofix log in a folder called Qoobox. It is located as such: E:\Qoobox\Combofix2.txt dated March 22 2009 at 8:32AM. There is another one located in the same folder called ComboFix-quarantined-files.txt dated March 22 2009 but it is timestamped 8:20PM but it has a lot of dll files in it. Let me know if you'd like these. I know that these were created during my first run of combofix because I saw this folder right after I ran it before posting here.
  6. 2009-03-23, 20:52 #6
    pskelley
    pskelley is offline
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247

    Default

    Concerned I am about this one, please read the information in the links:
    C:\Install Files\vegas\Keygen\keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
    http://en.wikipedia.org/wiki/Keygen
    http://forums.spybot.info/showpost.p...90&postcount=4

    I will try to move past that information, commenting on the uninstall list first.
    This can be done as time permits, but it is important, and may be why you are infected.
    Uninstall list: I look for malware and security issues and will not know all of your programs, but you should.
    Hackers are using out of date programs to infect folks more and more,
    Here is a small free tool that lets you know when something needs an update if you are interested:
    http://secunia.com/vulnerability_scanning/personal/ While PSI runs in the System Tray for realtime notifications, I personally prefer to turn it off in MSConfig and run it from All Programs when I want to do a check.

    Adobe Flash Player 10 Plugin
    Adobe Flash Player ActiveX
    Adobe recommends all users of Adobe Flash Player 10.0.12.36 and earlier versions upgrade to the newest version 10.0.22.87
    http://www.adobe.com/support/securit...apsb09-01.html

    Adobe Reader 8.1.1 <<< out of date and unsafe, see this:
    http://news.cnet.com/8301-1009_3-100...ml?tag=nl.e433
    http://www.filehippo.com/download_adobe_reader/
    (if you want a smaller program, look at this one)
    Foxit Reader 2.3 for Windows (make sure to uncheck any toolbars)
    http://www.foxitsoftware.com/pdf/rd_intro.php

    Java(TM) 6 Update 10
    Java(TM) 6 Update 7
    Both out of date and unsafe, see this:
    http://forums.spybot.info/showpost.p...80&postcount=2
    Be aware of this information so you can opt out of anything you do not want.
    Microsoft Does MSN Toolbar Distribution Deal With Java:
    http://searchengineland.com/microsof...java-15413.php

    Viewpoint Media Player
    For your information, Viewpoint is installed by aol probably without your knowledge. I suggest you uninstall this resource waster in Add Remove programs.
    http://www.spywareinfo.com/newslette....php#viewpoint
    http://www.clickz.com/news/article.php/3561546
    http://vil.nai.com/vil/content/v_137262.htm

    Let's see if we can get AVG updated now, please review this information first to see if you wish to use it:
    How to Install Free version AVG 8.0 without LinkScanner feature
    http://russelltexas.com/tutorials/avg8install.htm

    Download AVG 8 installer and save it to the Desktop
    http://free.avg.com/download-avg-ant...s-free-edition
    If you want FREE be sure to click: free for private use only

    Once you have the installer saved on the Desktop then you can go to Add Remove programs and uninstall AVG 7.5.
    I found that out the hard way and had to stop right in the middle of the installion.

    Once the old version is uninstalled, restart the computer to make sure it is gone, then double click the installer and follow the prompts.

    Let's run a scan now, post the scan results unless they are clean.

    * Right click the icon for AVG in System Tray and choose Open AVG User Interface.

    * Click on Update now, allow AVG to download and install any new updates.

    * Click on Computer Scanner then choose "Scan whole computer", this takes a round one hour on the computer I am using now.

    * Near the bottom above the words "The scan is complete" choose "Export overview to file"

    * Choose Desktop and give it a name you will recognize like AVG Scan Results, then choose SAVE.

    * Close results and close the Interface.

    * Copy and paste the contents of that file.

    Thanks
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006
  7. 2009-03-24, 04:12 #7
    nikonmikon
    nikonmikon is offline
    Junior Member
    Join Date
    Mar 2009
    Posts
    8

    Default

    Oh yes that keygen. They are dated 2006. I do not run pirated software. I have a pretty good idea how I was infected with this most recent affliction. I was navigating the web and arrived at a page and someone sent me a message on aim and I started typing to them and while I was typing a popup quickly appeared and I hit enter because I was still typing to my friend in aim. The popup stole focus and recieved my keystroke enter and allowed whatever it was to run. I was really upset. I noticed problems nearly right after that. The spyware remover popups started appearing and whatnot. Please don't hold it against me that I have old things. As you can see my operating hard disk is labeled e: and c: is just an old drive that I never access save for some old music files and things I recorded.

    Could you explain to me why malwarebytes removed my screenshot and deemed it as a rogue spyware remover? I can not for the life of me imagine how it came upon that conclusion when I created it as a JPG file. It is the same exact JPG image I posted in this thread at the very beginning.

    I will definitely update my adobe products as well as the JRE and install AVG right now.

    Here is the AVG log please keep in mind the keygen/crack software is old and i do not run it. c: is not my active drive.
    "Scan ""Scan whole computer"" was finished."
    "Infections";"22";"5";"17"
    "Spyware";"30";"21";"9"
    "Folders selected for scanning:";"Scan whole computer"
    "Scan started:";"Monday, March 23, 2009, 5:04:33 PM"
    "Scan finished:";"Monday, March 23, 2009, 8:57:09 PM (3 hour(s) 52 minute(s) 36 second(s))"
    "Total object scanned:";"1723674"
    "User who launched the scan:";"Mike"

    "Infections"
    "File";"Infection";"Result"
    "C:\NVIDIA\nForceWin2KXP\5.10\IDE\Win2K\nvuide.exe";"Trojan horse Generic13.JQO";"Moved to Virus Vault"
    "C:\NVIDIA\nForceWin2KXP\5.10\IDE\WinXP\nvuide.exe";"Trojan horse Generic13.JQO";"Moved to Virus Vault"
    "C:\NVIDIA\nForceWin2KXP\5.10\MemCtl\nvumctl.exe";"Trojan horse Generic13.JQO";"Moved to Virus Vault"
    "C:\NVIDIA\nForceWin2KXP\5.10\SMBus\nvusmb.exe";"Trojan horse Generic13.JQO";"Moved to Virus Vault"
    "D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe";"Virus found Win32/Heur";"Infected"
    "D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00100";"Virus found Win32/Heur";"Infected"
    "D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00115";"Virus found Win32/Heur";"Infected"
    "D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00125";"Virus found Win32/Heur";"Infected"
    "D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00133";"Virus found Win32/Heur";"Infected"
    "D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00141";"Virus found Win32/Heur";"Infected"
    "D:\Installs\DVD X Copy GOLD\DVDXCopy_GOLD_v3.0.4_full_install.exe:\ns_00149";"Virus found Win32/Heur";"Infected"
    "D:\Installs\DVD X Copy Platinum\DVDXCopy_Platinum_v4.0.3.8_full_install.exe";"Virus found Win32/Heur";"Infected"
    "D:\Installs\DVD X Copy Platinum\DVDXCopy_Platinum_v4.0.3.8_full_install.exe:\ns_00003";"Virus found Win32/Heur";"Infected"
    "D:\Installs\DVD X Copy Platinum\DVDXCopy_Platinum_v4.0.3.8_full_install.exe:\ns_00004";"Virus found Win32/Heur";"Infected"
    "D:\Installs\DVD X Copy Platinum\DVDXCopy_Platinum_v4.0.3.8_full_install.exe:\ns_00018";"Virus found Win32/Heur";"Infected"
    "D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe";"Virus found Win32/Heur";"Infected"
    "D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00005";"Virus found Win32/Heur";"Infected"
    "D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00015";"Virus found Win32/Heur";"Infected"
    "D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00018";"Virus found Win32/Heur";"Infected"
    "D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00021";"Virus found Win32/Heur";"Infected"
    "D:\Installs\dvd xpresses\DVDXCopy_XPRESS_v3.2.1_full_install.exe:\ns_00030";"Virus found Win32/Heur";"Infected"
    "D:\WINDOWS\system32\BO2802040113.dll";"Virus found Dropper.Exebind";"Moved to Virus Vault"

    "Spyware"
    "File";"Infection";"Result"
    "C:\Documents and Settings\MikeyMike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
    "C:\Documents and Settings\MikeyMike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.Standalone.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
    "C:\Documents and Settings\MikeyMike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.VSTi.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
    "C:\Install Files\HJT\backups\backup-20061202-113936-103.dll";"Adware Generic.SGG";"Moved to Virus Vault"
    "C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll";"Adware Generic.VBJ";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\akcore.dll";"Adware Generic.PAW";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\B51914001\build2.exe";"Adware Generic.RTQ";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\nsvcin.exe";"Adware Generic.DUP";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\MTE1Mzc6ODoxMg.exe";"Adware Generic.DFX";"Moved to Virus Vault"
    "D:\Installs\klgr\FamilyKeyLogger-setup.exe";"Potentially harmful program Logger.AIC";"Moved to Virus Vault"
    "D:\Installs\klgr\FamilyKeyLogger-setup.exe:\$JF\ctfmon.dll";"Potentially harmful program Logger.B";"Moved to Virus Vault"
    "D:\Installs\klgr\FamilyKeyLogger-setup.exe:\$JF\ctfmon.exe";"Potentially harmful program Logger.AIC";"Moved to Virus Vault"
    "D:\Installs\klgr\FamilyKeyLogger-setup.exe:\$JF\ctfs.dll";"Potentially harmful program Logger.D";"Moved to Virus Vault"
    "D:\Installs\setup_ares.exe";"Adware Generic.GXF";"Moved to Virus Vault"
    "D:\Installs\setup_ares.exe:\ns_00036";"Adware Generic.GXF";"Moved to Virus Vault"
    "D:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll";"Adware Generic.VBJ";"Moved to Virus Vault"
    "D:\Program Files\Microsoft AntiSpyware\Quarantine\556C3B58-DE08-4F3D-B439-6AF2D2\DC07FC24-2C8D-48FC-BAE8-5AA24E";"Adware Generic.CBA";"Moved to Virus Vault"
    "D:\Program Files\Microsoft AntiSpyware\Quarantine\9DB3C205-2726-43F1-AFB0-514C0D\0F0E1E88-40B2-4C3A-B97F-C12EB7";"Adware Generic.EQH";"Moved to Virus Vault"
    "D:\WINDOWS\Downloaded Program Files\SAIX.dll";"Adware Generic.OHP";"Moved to Virus Vault"
    "D:\WINDOWS\prelimhanse.exe";"Adware Generic.NLO";"Moved to Virus Vault"
    "D:\WINDOWS\system32\akcore.dll";"Adware Generic.PAW";"Moved to Virus Vault"
    "D:\WINDOWS\system32\o6nslg5716.dll";"Adware Generic.ADR";"Moved to Virus Vault"
    "D:\WINDOWS\Temp\nsvcin.exe";"Adware Generic.DUP";"Moved to Virus Vault"
    "D:\WINDOWS\Temp\vmstmp\vmstmp.exe";"Adware Generic.FBZ";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
    "E:\Documents and Settings\Mike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.Standalone.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
    "E:\Documents and Settings\Mike\My Documents\My Music\Ares\December 2007\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.VSTi.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
    "H:\temporary storage\Desktop Storage\my webspace\jupiter\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
    "H:\temporary storage\Desktop Storage\my webspace\jupiter\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.Standalone.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Potentially dangerous object"
    "H:\temporary storage\Desktop Storage\my webspace\jupiter\arturia jupiter-8v 1 0 - vsti - cracked - kn2007.rar:\Arturia Jupiter-8V 1.0 - Vsti - Cracked - KN2007\Patch\Jupiter-8V.VSTi.v1.0-patch.exe";"Potentially harmful program HackTool.crack";"Potentially dangerous object"

    "Warnings"
    "File";"Infection";"Result"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt";"Found Tracking cookie.Doubleclick";"Healed"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\2o7.net.1913101d";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\2o7.net.484dbb69";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\advertising.com.1820df7a";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\advertising.com.203aa218";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\advertising.com.525a5fb9";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\advertising.com.b624fa46";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\advertising.com.f62113d5";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\atdmt.com.b3e33b5f";"Found Tracking cookie.Atdmt";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\doubleclick.net.bf396750";"Found Tracking cookie.Doubleclick";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\hitbox.com.2b95f8a3";"Found Tracking cookie.Hitbox";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\statcounter.com.71faa69c";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\tacoda.net.c4fe2ebb";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\tacoda.net.e9f57f8";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\a23fvavz.default\cookies.txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@2o7[1].txt";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@2o7[1].txt:\2o7.net.57e477c9";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt:\burstnet.com.27341d57";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt:\burstnet.com.c4fe2ebb";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[2].txt";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[2].txt:\cpvfeed.com.225fb011";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[2].txt:\cpvfeed.com.23f953b";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[2].txt:\cpvfeed.com.5fac0bd5";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[2].txt:\cpvfeed.com.f83873ed";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@m.webtrends[2].txt";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@m.webtrends[2].txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@questionmarket[2].txt";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@questionmarket[2].txt:\questionmarket.com.3eb5a9f1";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@questionmarket[2].txt:\questionmarket.com.4dd5e426";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.271f5c18";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.3f4566dd";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.44927ec";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.8d15c3aa";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[1].txt";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[1].txt:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[1].txt:\tacoda.net.c4fe2ebb";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[1].txt:\tacoda.net.e9f57f8";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@tribalfusion[2].txt";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@tribalfusion[2].txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@yadro[2].txt";"Found Tracking cookie.Yadro";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@yadro[2].txt:\yadro.ru.c77afad5";"Found Tracking cookie.Yadro";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@yieldmanager[1].txt";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Cookies\mikeymike@yieldmanager[1].txt:\yieldmanager.com.6ce984df";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@m.webtrends[2].txt";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@m.webtrends[2].txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@revsci[1].txt";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@revsci[1].txt:\revsci.net.12a42f6a";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@revsci[1].txt:\revsci.net.3f4566dd";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "C:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@revsci[1].txt:\revsci.net.44927ec";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt:\ad.yieldmanager.com.830b6f08";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt:\ad.yieldmanager.com.87a9ab5d";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt:\ad.yieldmanager.com.eec26c3e";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt:\ad.yieldmanager.com.8a47878";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[1].txt:\ad.yieldmanager.com.ff92306";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\Guest\Cookies\guest@msnportal.112.2o7[1].txt";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "D:\Documents and Settings\Guest\Cookies\guest@msnportal.112.2o7[1].txt:\msnportal.112.2o7.net.7225be6f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt";"Found Tracking cookie.2o7";"Healed"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\247realmedia.com.68087763";"Found Tracking cookie.247realmedia";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\2o7.net.2ebf85ed";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\2o7.net.404851f2";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\2o7.net.647d92b0";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\2o7.net.6d0150be";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\atdmt.com.b3e33b5f";"Found Tracking cookie.Atdmt";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\doubleclick.net.bf396750";"Found Tracking cookie.Doubleclick";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\tacoda.net.5935e89";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\adrevolver.com.4a719aa9";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\advertising.com.1820df7a";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\advertising.com.203aa218";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\advertising.com.f62113d5";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\casalemedia.com.80ad4799";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\fastclick.net.595d5695";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\fastclick.net.8a6435e9";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\media.adrevolver.com.2be00b0";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\media.adrevolver.com.539b0606";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\media.adrevolver.com.57f415b5";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\media.adrevolver.com.fa5187ad";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\mediaplex.com.f652b123";"Found Tracking cookie.Mediaplex";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\realmedia.com.68087763";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\realmedia.com.ef906bac";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\statse.webtrendslive.com.2521fe1b";"Found Tracking cookie.Webtrendslive";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\statse.webtrendslive.com.569b8452";"Found Tracking cookie.Webtrendslive";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\statse.webtrendslive.com.569b8452";"Found Tracking cookie.Webtrendslive";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\statse.webtrendslive.com.910abdf5";"Found Tracking cookie.Webtrendslive";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\tacoda.net.c4fe2ebb";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\trafficmp.com.5660bdd9";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\trafficmp.com.f26d6a3e";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Firefox\Profiles\default.7pd\cookies.txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Profiles\default\y7synwku.slt\cookies.txt";"Found Tracking cookie.2o7";"Healed"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Profiles\default\y7synwku.slt\cookies.txt:\2o7.net.2ebf85ed";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Profiles\default\y7synwku.slt\cookies.txt:\real.com.4862fb06";"Found Tracking cookie.Real";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Profiles\default\y7synwku.slt\cookies.txt:\real.com.6baf87ba";"Found Tracking cookie.Real";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Application Data\Mozilla\Profiles\default\y7synwku.slt\cookies.txt:\zedo.com.ea38ec61";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@abetterinternet[1].txt";"Found Tracking cookie.Abetterinternet";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@abetterinternet[1].txt:\abetterinternet.com.40880089";"Found Tracking cookie.Abetterinternet";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@abetterinternet[1].txt:\abetterinternet.com.500e57dd";"Found Tracking cookie.Abetterinternet";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@abetterinternet[1].txt:\abetterinternet.com.5e90eebd";"Found Tracking cookie.Abetterinternet";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@abetterinternet[1].txt:\abetterinternet.com.b31a5bff";"Found Tracking cookie.Abetterinternet";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@abetterinternet[1].txt:\abetterinternet.com.eaffdc9a";"Found Tracking cookie.Abetterinternet";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@admarketplace[2].txt";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@admarketplace[2].txt:\admarketplace.net.9b1440c";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@admarketplace[2].txt:\admarketplace.net.a6c5ee3c";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@admarketplace[2].txt:\admarketplace.net.f062200";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adopt.euroclick[1].txt";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adopt.euroclick[1].txt:\adopt.euroclick.com.17044b51";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adopt.euroclick[1].txt:\adopt.euroclick.com.6d7740f7";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adopt.euroclick[1].txt:\adopt.euroclick.com.891542da";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adopt.euroclick[1].txt:\adopt.euroclick.com.8b1bd7bc";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt:\adorigin.com.29706606";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt:\adorigin.com.2a38207b";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt:\adorigin.com.4e5e92d6";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt:\adorigin.com.bf396750";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt:\adorigin.com.c54a016";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adorigin[2].txt:\adorigin.com.c9a58f18";"Found Tracking cookie.Adorigin";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adrevolver[3].txt";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adrevolver[3].txt:\adrevolver.com.4a719aa9";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@ads.guardian.co[1].txt";"Found Tracking cookie.Co";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@ads.guardian.co[1].txt:\ads.guardian.co.uk.312f8dd0";"Found Tracking cookie.Co";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adtrak[2].txt";"Found Tracking cookie.Adtrak";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@adtrak[2].txt:\adtrak.net.cf7f90fd";"Found Tracking cookie.Adtrak";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt:\burstnet.com.27341d57";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt:\burstnet.com.795c98fe";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@burstnet[1].txt:\burstnet.com.c4fe2ebb";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[1].txt";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[1].txt:\cpvfeed.com.23f953b";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[1].txt:\cpvfeed.com.5fac0bd5";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@cpvfeed[1].txt:\cpvfeed.com.f83873ed";"Found Tracking cookie.Cpvfeed";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@dealtime[2].txt";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@dealtime[2].txt:\dealtime.com.2a6d70da";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@dealtime[2].txt:\dealtime.com.48a2428c";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@dealtime[2].txt:\dealtime.com.a164b0cd";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@dealtime[2].txt:\dealtime.com.f53eaefc";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@falkag[1].txt";"Found Tracking cookie.Falkag";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@falkag[1].txt:\falkag.net.795c98fe";"Found Tracking cookie.Falkag";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@gamershell[1].txt";"Found Tracking cookie.Gamershell";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@gamershell[1].txt:\gamershell.com.13a6979d";"Found Tracking cookie.Gamershell";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@gamershell[1].txt:\gamershell.com.8aafc627";"Found Tracking cookie.Gamershell";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@gamershell[1].txt:\gamershell.com.99c35e71";"Found Tracking cookie.Gamershell";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@hypertracker[1].txt";"Found Tracking cookie.Hypertracker";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@hypertracker[1].txt:\hypertracker.com.efa7882e";"Found Tracking cookie.Hypertracker";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@ivwbox[1].txt";"Found Tracking cookie.Ivwbox";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@ivwbox[1].txt:\ivwbox.de.41d82fe2";"Found Tracking cookie.Ivwbox";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@m.webtrends[2].txt";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@m.webtrends[2].txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@msnportal.112.2o7[1].txt";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@msnportal.112.2o7[1].txt:\msnportal.112.2o7.net.7225be6f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@questionmarket[2].txt";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@questionmarket[2].txt:\questionmarket.com.3eb5a9f1";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@questionmarket[2].txt:\questionmarket.com.4e513048";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.122bd7a6";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.1635d65f";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.1bfc0218";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.3f4566dd";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.44605440";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.44927ec";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.55564293";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.6132e6c9";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.652ce730";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.a64c3767";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.a175e6db";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.bfe9bf85";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.e1150a02";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.edc774d4";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.f5f26334";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@revsci[2].txt:\revsci.net.fb487293";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@searchportal.information[2].txt";"Found Tracking cookie.Information";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@searchportal.information[2].txt:\searchportal.information.com.3a8d7204";"Found Tracking cookie.Information";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@searchportal.information[2].txt:\searchportal.information.com.44e78b2";"Found Tracking cookie.Information";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@searchportal.information[2].txt:\searchportal.information.com.ac2fa2e1";"Found Tracking cookie.Information";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[2].txt";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.5935e89";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.c4fe2ebb";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.ed9c50d1";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.23194c51";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.5660bdd9";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.8852acdc";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.94d192dc";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.f26d6a3e";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.42abf50";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.c28a69e3";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.ffea4053";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tribalfusion[1].txt";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@tribalfusion[1].txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.1663d518";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.1c779fa9";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.3455990f";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.6a4c392d";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.6f63bef7";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.734a2c6b";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.c7561bc1";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@web-stat[2].txt:\web-stat.com.ef741d67";"Found Tracking cookie.Web-stat";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@yadro[1].txt";"Found Tracking cookie.Yadro";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@yadro[1].txt:\yadro.ru.c77afad5";"Found Tracking cookie.Yadro";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@yieldmanager[2].txt";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@yieldmanager[2].txt:\yieldmanager.com.6ce984df";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@yieldmanager[2].txt:\yieldmanager.com.795c98fe";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
  8. 2009-03-24, 04:13 #8
    nikonmikon
    nikonmikon is offline
    Junior Member
    Join Date
    Mar 2009
    Posts
    8

    Default

    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@zedo[2].txt";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@zedo[2].txt:\zedo.com.775ee79c";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@zedo[2].txt:\zedo.com.a5b6a132";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@zedo[2].txt:\zedo.com.c1dd09f2";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@zedo[2].txt:\zedo.com.cef1c7af";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Cookies\mikeymike@zedo[2].txt:\zedo.com.dd15d628";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@ad.yieldmanager[1].txt";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@admarketplace[2].txt:\admarketplace.net.9b1440c";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.3dabece";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.830b6f08";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.87a9ab5d";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.8a47878";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@admarketplace[2].txt";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@admarketplace[2].txt:\admarketplace.net.a6c5ee3c";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@searchportal.information[1].txt";"Found Tracking cookie.Information";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@searchportal.information[1].txt:\searchportal.information.com.3a8d7204";"Found Tracking cookie.Information";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@searchportal.information[1].txt:\searchportal.information.com.44e78b2";"Found Tracking cookie.Information";"Moved to Virus Vault"
    "D:\Documents and Settings\MikeyMike\Local Settings\Temp\Cookies\mikeymike@searchportal.information[1].txt:\searchportal.information.com.b098cce1";"Found Tracking cookie.Information";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite";"Found Tracking cookie.2o7";"Healed"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\247realmedia.com.855b46d";"Found Tracking cookie.247realmedia";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.1aa86b19";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.41207ad0";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.419f6206";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.7ae9c250";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.8c2deff2";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.a1e6341f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.a698612e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.484dbb69";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.5cef2cf7";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.686f76b4";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.a66c055e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.bd50f876";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.c2f247d9";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.a8d88d11";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.aac6123b";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.abaa5208";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.ae5b0007";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.cb19198d";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.bd6b9f08";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.d286aa75";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.dd1cc291";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.e0b98030";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.f15b0949";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.f7a3e5fe";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\247realmedia.com.d90d45cf";"Found Tracking cookie.247realmedia";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.259cf38d";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.3639522a";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.419ddb50";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.1913101d";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.1fd2efb0";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.50ba3882";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.5fe08528";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.680f684a";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.69e1b881";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.6d21e8c2";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.747f40be";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.2574710e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.7815c7ab";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.7919062b";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.7ecfda1e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.9a526fbf";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.9eaabe7c";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.9f8b156b";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.ade0f53f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.ba00a41a";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.be71720e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.d3686ef2";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.ec4774bb";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.f7416ceb";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\2o7.net.f8075bef";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\aavalue.com.1caaee8";"Found Tracking cookie.Aavalue";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\adbrite.com.44f92a69";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\adopt.euroclick.com.891542da";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\questionmarket.com.3eb5a9f1";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\adbrite.com.557c9f74";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\questionmarket.com.4dd5e426";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\questionmarket.com.d4dcb59c";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.27e60b8d";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.44927ec";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\adbrite.com.71beeff9";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\adbrite.com.d5e309c2";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\admarketplace.net.69780f9f";"Found Tracking cookie.Admarketplace";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\adtech.de.a9245469";"Found Tracking cookie.Adtech";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.4fdfee8f";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\bs.serving-sys.com.5bf1f00f";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\realmedia.com.125a868c";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\realmedia.com.68087763";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\realmedia.com.6b2e2a72";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\realmedia.com.964cd308";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.2df99d79";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.50e13b1b";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.6132e6c9";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.73a3e177";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.d14b07f1";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.e9dbeb91";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\realmedia.com.ef906bac";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\revsci.net.f5f26334";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\serving-sys.com.255d6f2f";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\serving-sys.com.400f83f";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\serving-sys.com.4b416ef8";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\serving-sys.com.606c3d3b";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\serving-sys.com.6a1cf9e8";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\serving-sys.com.c9034af6";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tacoda.net.4366831a";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tacoda.net.d323296e";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tacoda.net.e9f57f8";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\trafficmp.com.37644bdb";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\trafficmp.com.a00e30b4";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\trafficmp.com.ae53b8b";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\trafficmp.com.e2e71e33";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\trafficmp.com.f3e5803e";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tribalfusion.com.7610f0e0";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tribalfusion.com.8b22ad8c";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tribalfusion.com.9bc3e98f";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "E:\Documents and Settings\Mike\Application Data\Mozilla\Firefox\Profiles\db6903yy.default\cookies.sqlite:\yieldmanager.com.ce59db3e";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@ad.yieldmanager[1].txt";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.557bf2b0";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.830b6f08";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.8a47878";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@ad.yieldmanager[1].txt:\ad.yieldmanager.com.ff92306";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@adrevolver[2].txt";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@adrevolver[2].txt:\adrevolver.com.f6cfcad4";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@advertising[2].txt";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@advertising[2].txt:\advertising.com.1820df7a";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@advertising[2].txt:\advertising.com.525a5fb9";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@advertising[2].txt:\advertising.com.b624fa46";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@advertising[2].txt:\advertising.com.203aa218";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@advertising[2].txt:\advertising.com.f62113d5";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@atdmt[2].txt";"Found Tracking cookie.Atdmt";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@atdmt[2].txt:\atdmt.com.b3e33b5f";"Found Tracking cookie.Atdmt";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@bluestreak[2].txt";"Found Tracking cookie.Bluestreak";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@bluestreak[2].txt:\bluestreak.com.bf396750";"Found Tracking cookie.Bluestreak";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@m.webtrends[1].txt";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@casalemedia[1].txt";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@casalemedia[1].txt:\casalemedia.com.6a12b080";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@casalemedia[1].txt:\casalemedia.com.80ad4799";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@fastclick[1].txt";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@fastclick[1].txt:\fastclick.net.8a6435e9";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@fastclick[1].txt:\fastclick.net.bb8bcae";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@fastclick[1].txt:\fastclick.net.c054072f";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@m.webtrends[1].txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@casalemedia[1].txt:\casalemedia.com.bcb92034";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@mediaplex[1].txt";"Found Tracking cookie.Mediaplex";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@mediaplex[1].txt:\mediaplex.com.f652b123";"Found Tracking cookie.Mediaplex";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@perf.overture[1].txt";"Found Tracking cookie.Overture";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@perf.overture[1].txt:\perf.overture.com.610ef18d";"Found Tracking cookie.Overture";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@questionmarket[1].txt";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@questionmarket[1].txt:\questionmarket.com.3eb5a9f1";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@questionmarket[1].txt:\questionmarket.com.4e513048";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@realmedia[1].txt";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@realmedia[1].txt:\realmedia.com.68087763";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@realmedia[1].txt:\realmedia.com.ef906bac";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@doubleclick[1].txt";"Found Tracking cookie.Doubleclick";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@doubleclick[1].txt:\doubleclick.net.bf396750";"Found Tracking cookie.Doubleclick";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.5935e89";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.c4fe2ebb";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.a3218a37";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.cd7ce44f";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tacoda[2].txt:\tacoda.net.ed9c50d1";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.23194c51";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.42abf50";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.5660bdd9";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.8852acdc";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.94d192dc";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.ffea4053";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.a6c5ee3c";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@trafficmp[2].txt:\trafficmp.com.f26d6a3e";"Found Tracking cookie.Trafficmp";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tribalfusion[2].txt";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tribalfusion[2].txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "K:\mikeymike\.ies4linux\ie6\drive_c\windows\profiles\mikeymike\Cookies\mikeymike@tribalfusion[2].txt:\tribalfusion.com.fd318246";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt";"Found Tracking cookie.Adbrite";"Healed"
    "K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\adbrite.com.71beeff9";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\adbrite.com.d5e309c2";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\atdmt.com.b3e33b5f";"Found Tracking cookie.Atdmt";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\casalemedia.com.80ad4799";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\doubleclick.net.1d39bd48";"Found Tracking cookie.Doubleclick";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\default\xmbqjbve.slt\cookies.txt:\tribalfusion.com.fd318246";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt";"Found Tracking cookie.Adbrite";"Healed"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.119d8835";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.1522255c";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.17c1895f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.1969cf0a";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.1aa86b19";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.1fbb16f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.2755766";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.2ce4dba7";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.2e1f9920";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.2ebf85ed";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.35a30809";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.cc77c00b";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.e694783e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.229c30b3";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.59f45125";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.745d8e6f";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.82bb24d8";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.37588d03";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.4a49b844";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.69e1b881";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\qksrv.net.2060efc3";"Found Tracking cookie.Qksrv";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\qksrv.net.3f989311";"Found Tracking cookie.Qksrv";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.43f579ee";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.5511efa5";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.7ff0d86c";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.872c3391";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.8fa3ac0b";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.9039c1dc";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.b821116b";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.ba6eccf2";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.c0865609";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.c522c865";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.3639522a";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.365d03d4";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.38eb5260";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.38ec4d40";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.404851f2";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.41207ad0";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.41406ce9";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.7919062b";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.7fcf04e2";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.92b4d8ae";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.9a95c5ee";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.9f8b156b";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.adc85da";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.d2ffcc1c";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.d3df4663";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.e31bc356";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.e67f3d3d";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.ea235af1";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.f0e2d12f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\ad.yieldmanager.com.830b6f08";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\ad.yieldmanager.com.b4be891c";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\ad.yieldmanager.com.b68f2b7b";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.484dbb69";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.4987de69";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.50ba3882";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.5cef2cf7";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.6fe2e494";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.95e64c93";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.ca30b7c8";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.cd523f68";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.d3a20a6e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.9eaabe7c";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.a66c055e";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.f57f2f12";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\ad.yieldmanager.com.d1d9eab3";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\ad.yieldmanager.com.e762f029";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adopt.euroclick.com.891542da";"Found Tracking cookie.Euroclick";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adtech.de.a9245469";"Found Tracking cookie.Adtech";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.af51ae29";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.dc3d664d";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\2o7.net.fc14afc3";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\ad.yieldmanager.com.557bf2b0";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adbrite.com.71beeff9";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adbrite.com.d5e309c2";"Found Tracking cookie.Adbrite";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adtech.de.d551775e";"Found Tracking cookie.Adtech";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\advertising.com.1820df7a";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adrevolver.com.4a719aa9";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adrevolver.com.ae595d8";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\adrevolver.com.f6cfcad4";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\advertising.com.203aa218";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\advertising.com.525a5fb9";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\advertising.com.b624fa46";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\atdmt.com.b3e33b5f";"Found Tracking cookie.Atdmt";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\advertising.com.f62113d5";"Found Tracking cookie.Advertising";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\bfast.com.c53c448c";"Found Tracking cookie.Bfast";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\bluestreak.com.bf396750";"Found Tracking cookie.Bluestreak";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\bs.serving-sys.com.5bf1f00f";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\burstnet.com.27341d57";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\burstnet.com.c4fe2ebb";"Found Tracking cookie.Burstnet";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\casalemedia.com.1def8f2b";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\casalemedia.com.121ba2aa";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\casalemedia.com.1773afc";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\casalemedia.com.5e43734d";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\casalemedia.com.80ad4799";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\casalemedia.com.987e6b46";"Found Tracking cookie.Casalemedia";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\dealtime.com.2a6d70da";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\dealtime.com.48a2428c";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\dealtime.com.a164b0cd";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\dealtime.com.c4a73d85";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\m.webtrends.com.b4ca7df0";"Found Tracking cookie.Webtrends";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\msnportal.112.2o7.net.7225be6f";"Found Tracking cookie.2o7";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\tacoda.net.27341d57";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\dealtime.com.f53eaefc";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\doubleclick.net.bf396750";"Found Tracking cookie.Doubleclick";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\fastclick.net.57e8da10";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\fastclick.net.8a6435e9";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\fastclick.net.bb8bcae";"Found Tracking cookie.Fastclick";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\hitbox.com.2b95f8a3";"Found Tracking cookie.Hitbox";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\hitbox.com.bbf2a6e8";"Found Tracking cookie.Hitbox";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\media.adrevolver.com.2be00b0";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\media.adrevolver.com.2be00b0";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\questionmarket.com.3eb5a9f1";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.44927ec";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\questionmarket.com.4dd5e426";"Found Tracking cookie.Questionmarket";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.3f4566dd";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.55564293";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.1bfc0218";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.271f5c18";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.d8ade43c";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.f1b6b2e";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\serving-sys.com.255d6f2f";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\serving-sys.com.400f83f";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\serving-sys.com.4b416ef8";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\serving-sys.com.606c3d3b";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\serving-sys.com.6a1cf9e8";"Found Tracking cookie.Serving-sys";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.24a0e3d6";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.2e044bae";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\media.adrevolver.com.539b0606";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\media.adrevolver.com.57f415b5";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\media.adrevolver.com.5fed601d";"Found Tracking cookie.Adrevolver";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\mediaplex.com.323e9a10";"Found Tracking cookie.Mediaplex";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\mediaplex.com.f652b123";"Found Tracking cookie.Mediaplex";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\overture.com.8e32a996";"Found Tracking cookie.Overture";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\realmedia.com.45313e9e";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\realmedia.com.68087763";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\realmedia.com.6b2e2a72";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\realmedia.com.ef906bac";"Found Tracking cookie.Realmedia";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.2df99d79";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.8d15c3aa";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.a175e6db";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.e9dbeb91";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.edc774d4";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.3e7bc169";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.9b0891e7";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.cd651a15";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.b25dc93a";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.dd7082d2";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.e431917c";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\revsci.net.e1150a02";"Found Tracking cookie.Revsci";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\stat.dealtime.com.f58c396a";"Found Tracking cookie.Dealtime";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.71aedbdb";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.939eb451";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.96b22b2e";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.415c8c3f";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.50ffa7bc";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.7a4c9dcd";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.7d06ed4d";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.9c475c3f";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.af1da3df";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.c8eac4e";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.d5c7c140";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.d5f88925";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.d6059e76";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.d718576c";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.e685680a";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.e3f5ccb7";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.e8352534";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\statcounter.com.fff6cf5d";"Found Tracking cookie.Statcounter";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\tacoda.net.c4fe2ebb";"Found Tracking cookie.Tacoda";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\tradedoubler.com.eab0972e";"Found Tracking cookie.Tradedoubler";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\tribalfusion.com.dcc03271";"Found Tracking cookie.Tribalfusion";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\yadro.ru.c77afad5";"Found Tracking cookie.Yadro";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\yieldmanager.com.795c98fe";"Found Tracking cookie.Yieldmanager";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\zedo.com.775ee79c";"Found Tracking cookie.Zedo";"Moved to Virus Vault"
    "K:\mikeymike\.mozilla\firefox\za8jzxqp.default\cookies.txt:\zedo.com.c1dd09f2";"Found Tracking cookie.Zedo";"Moved to Virus Vault"


    The scan took 4 hours
    please dont ask me to do it again hahahaha
  9. 2009-03-24, 16:32 #9
    pskelley
    pskelley is offline
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247

    Default

    Could you explain to me why malwarebytes removed my screenshot and deemed it as a rogue spyware remover?
    You would have to ask the MBAM creators that question, I use the tool only. You can return anything you wish.
    Open MBAM > choose Quarantine > check the item/s you want restored and click Restore.

    If you need help controlling cookies, have a look here:
    http://www.mvps.org/winhelp2002/cookies.htm
    http://www.microsoft.com/windows/ie/...cy/config.mspx

    Looks to me like all of the junk is in AVG's Virus Vault...I would wait a few days then clean out that vault. Make sure you empty the Recycle Bin in case AVG moves the junk there.
    The scan took 4 hours
    please dont ask me to do it again hahahaha
    When scans take an expectional amount of time, it is usually a hard drive maintenance issue. When did you scan the disk and defrag last?
    Defragmenting
    http://artsweb.bham.ac.uk/artsit/Inf...ag-win2kxp.htm
    Check for Disk Errors in Windows XP
    http://www.microsoft.com/windowsxp/u...ips/kbtip.mspx

    Let's se if we can wrap up like this:

    Remove combofix from the computer like this:

    Click START then RUN
    Now type or copy Combofix /u in the runbox and click OK.
    Note the space between the X and the U, it needs to be there.



    Clean the System Restore files like this:

    Turn off System Restore.
    On the Desktop, right-click My Computer.
    Click Properties.
    Click the System Restore tab.
    Check Turn off System Restore.
    Click Apply, and then click OK.

    Reboot

    Turn ON System Restore,
    On the Desktop, right-click My Computer.
    Click Properties.
    Click the System Restore tab.
    UN-Check *Turn off System Restore*.
    Click Apply, and then click OK.

    Update MBAM and scan to be sure we missed none of the junk, there is no need to post a clean scan result.
    (MBAM is yours to keep if you wish, update it and run it once a month or so)

    (optional, it's your computer)
    Update AVG 8 and scan the system, to be sure it is running right and scanning clean.
    (good AVG information)
    FAQ: http://www.avg.com/faq
    AVG Free Forum: http://freeforum.avg.com/

    If all is well at this point, let me know and I will close the topic.

    Some good information for you:
    http://users.telenet.be/bluepatchy/m...wcomputer.html
    http://www.microsoft.com/windowsxp/u...s/mcgill1.mspx

    Here is some great information from experts in this field that will help you stay clean and safe online.
    http://users.telenet.be/bluepatchy/m...revention.html
    http://forums.spybot.info/showthread.php?t=279
    http://russelltexas.com/malware/allclear.htm
    http://forum.malwareremoval.com/viewtopic.php?t=14
    http://www.bleepingcomputer.com/forums/topict2520.html
    http://cybercoyote.org/security/not-admin.shtml

    http://www.malwarecomplaints.info/

    Thanks...pskelley
    Safer Networking Forums
    http://www.spybot.info/en/donate/index.html
    If you are reading this information...thank a teacher,
    If you are reading it in English...thank a soldier.

    http://users.telenet.be/bluepatchy/m...oes/Links.html
    http://www.microsoft.com/windows/ie/...rotection.mspx
    Improve the safety of your browsing and e-mail activities
    http://www.microsoft.com/protect/com.../browsing.mspx
    Last edited by pskelley; 2009-03-24 at 20:05. Reason: posted information twice
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006
  10. 2009-03-24, 18:51 #10
    nikonmikon
    nikonmikon is offline
    Junior Member
    Join Date
    Mar 2009
    Posts
    8

    Default

    Hey, thanks. I didn't really mean to be belligerent about mbam removing the screenshot. I was more curious I guess. Thanks for the information on how to return it from quarantine

    I believe the scan took 4 hours because I have tons of drives and things. C and D are full windows installs that I have stopped using and those drives are nearly full. They are rather large drives. The higher lettered drives HIJK are partitions of linux that I installed. I use ext2 installable file system for windows to allow me to access those old partitions. I will take your advice by defragging and scanning them. That will probably help quite a bit.

    I have started the mbam scan and will do the AVG after. According to the time that past scans have taken, this should be completed at roughly 8:40pm EST.

    I will post the outcome at that time. Hopefully they will come up with no bad things.

    Seeya at 8. Or whenever you get a chance to reply

    I would like to thank you for your help. You have been really understanding. A+ helper totally!
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules