This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Help removing bgates[2].exe, srvrnw[1].exe

58 min read

This thread's last reply is from July 23, 2006, 4:36 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

gettingbetter
July 15, 2006, 2:51 PM UTC
Hi,

I searched through this helpful site to see how I could fix the problem myself, however, it appears as if each case is unique for each user.

I am trying to remove an annoying trojan horse from my system that Nortan Anti-virus does not quarantine or eliminate. What I have done so far is the following:

Downloaded and run Prevx - didn't solve the problem.

Downloaded and run ATF-Cleaner - this appeared to change the Virus alerts NAV provides from the bgates[2].exe notification to the srvrnw[1].exe notification. But, as I was writing this, the same warning came right back up for the bgates[2].exe. Sigh.

I've downloaded and run KillBox. This didn't seem to do anything other than change my Windows desktop to the Windows XP theme, lol.

I've downloaded and run Hijackthis - here is the current log of what is going on. Perhaps someone can point out to me what I need to do next.

It's really amazing how annoying and persistent these trojans can be!!!

Here is the log file:

Logfile of HijackThis v1.99.1
Scan saved at 10:38:14 AM, on 7/15/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\STOPzilla!\szserver.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Instant Message Grabber 2.x\IMGrabber2.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Dantz\Retrospect\retrorun.exe
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\STOPzilla!\STOPzilla.exe
C:\Program Files\Instant Message Grabber 2.x\IMGrabber2.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Java\jre1.5.0\bin\jucheck.exe
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WinAntiVirus Pro 2006\FWSvc.exe
C:\Documents and Settings\Foster Brown\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://www.yahoo.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: CIEIntegrator Object - {2178F3FB-2560-458F-BDEE-631E2FE0DFE4} - C:\Program Files\WinAntiVirus Pro 2006\winpgi.dll
O2 - BHO: Malicious Scripts Scanner - {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: IEFW Object - {B5141620-C2B2-4D95-9F0F-134D99C87AB0} - C:\Program Files\WinAntiVirus Pro 2006\IEFWBHO.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [STOPzilla] C:\Program Files\STOPzilla!\STOPzilla.exe /autostart
O4 - HKLM\..\Run: [IMGrabber2] C:\Program Files\Instant Message Grabber 2.x\IMGrabber2.exe UI
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [PrevxOne] C:\Program Files\Prevx1\PXConsole.exe
O4 - HKLM\..\Run: [WinAntiVirusPro2006] "C:\Program Files\WinAntiVirus Pro 2006\WinAV.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Yahoo! Desktop Search System Tray.lnk = C:\Program Files\Yahoo!\Yahoo! Desktop Search\YDSsystray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar3.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar3.dll/cmwordtrans.html
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar3.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar3.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar3.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar3.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .m4v: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin6.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O15 - Trusted Zone: http://www.phpbb.com
O15 - Trusted Zone: http://www.snapfish.com
O15 - Trusted Zone: www1.snapfish.com
O16 - DPF: {230C3D02-DA27-11D2-8612-00A0C93EEA3C} (SAXFile FileUpload ActiveX Control) - http://www.winkflash.com/photo/loaders/SAXFile.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsup ... mAData.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.snapfish.com/SnapfishActivia.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://www-secure.symantec.com/techsup ... gctlsi.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsup ... gctlsr.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} (Symantec Download Bridge) - http://a248.e.akamai.net/f/248/5462/2h/www.symantecstore.com/v2.0-img/operations/symbizpr/xcontrol/SymDlBrg.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: winhdn32 - C:\WINDOWS\SYSTEM32\winhdn32.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Firewall service (FWSvc) - WinSoftware, Ltd. - C:\Program Files\WinAntiVirus Pro 2006\FWSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MGS - Unknown owner - C:\Program Files\Instant Message Grabber 2.x\IMGrabber2.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect\retrorun.exe
O23 - Service: Retrospect Helper - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect\rthlpsvc.exe
O23 - Service: Retrospect WD Service (RetroWDSvc) - Dantz Development Corporation - C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: STOPzilla Service (szserver) - Unknown owner - C:\Program Files\Common Files\STOPzilla!\szserver.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Program Files\RealVNC\VNC4\WinVNC4.exe" -service (file missing)

============

Anyone can help? I'd appreciate it, and so would my computer.
'KotaGuy
July 15, 2006, 8:46 PM UTC
Hi gettingbetter.

Run HijackThis. Click the Misc Tools button. Then the Uninstall Manager button. Then the Save List button. Save the list to your Desktop.

Post that list in your next reply please.

Thanks!
gettingbetter
July 15, 2006, 10:56 PM UTC
Thanks for the reply. Here is the list you requested - also, those items in the list with the strange characters are just programs I've installed in other languages months ago. This problem just showed up days ago.

‚±‚¿‚çÂ
'KotaGuy
July 16, 2006, 3:02 AM UTC
Click Start>Run type in appwiz.cpl and hit Enter. From the list uninstall:

Instant Message Grabber 2.3 beta 6
J2SE Runtime Environment 5.0
Viewpoint Manager (Remove Only)
Viewpoint Media Player
Viewpoint Toolbar (Remove Only)
WinAntiVirus Pro 2006 2.1.228.2

Once done that... click Start>Run type in services.msc an hit Enter. From thelist look for Firewall service. Right click on it. Stop the service and change the Startup Type to Disabled. Do the same for MGS

Run and scan with HijackThis. Place checks beside the following:

O2 - BHO: CIEIntegrator Object - {2178F3FB-2560-458F-BDEE-631E2FE0DFE4} - C:\Program Files\WinAntiVirus Pro 2006\winpgi.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O2 - BHO: IEFW Object - {B5141620-C2B2-4D95-9F0F-134D99C87AB0} - C:\Program Files\WinAntiVirus Pro 2006\IEFWBHO.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O4 - HKLM\..\Run: [IMGrabber2] C:\Program Files\Instant Message Grabber 2.x\IMGrabber2.exe UI
O4 - HKLM\..\Run: [WinAntiVirusPro2006] "C:\Program Files\WinAntiVirus Pro 2006\WinAV.exe" /min
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O15 - Trusted Zone: http://www.phpbb.com
O15 - Trusted Zone: http://www.snapfish.com
O15 - Trusted Zone: www1.snapfish.com
O16 - DPF: {230C3D02-DA27-11D2-8612-00A0C93EEA3C} (SAXFile FileUpload ActiveX Control) - http://www.winkflash.com/photo/loaders/SAXFile.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.snapfish.com/SnapfishActivia.cab
O20 - Winlogon Notify: winhdn32 - C:\WINDOWS\SYSTEM32\winhdn32.dll
O23 - Service: Firewall service (FWSvc) - WinSoftware, Ltd. - C:\Program Files\WinAntiVirus Pro 2006\FWSvc.exe
O23 - Service: MGS - Unknown owner - C:\Program Files\Instant Message Grabber 2.x\IMGrabber2.exe

Close all open windows/browsers and click the Fix button. Then click the Config button. Then the Delete an NT Service button. In the text field type in Firewall service and click OK. Do the same for MGS.

Boot into Safe Mode. To do this:

1. Reboot your computer.
2. Tap the F8 button as your computer is booting to bring you to the Advanced Options Menu.
3. Select Safe Mode and press Enter.

Make sure no files will be hidden. To do this:

1. Click Start.
2. Open My Computer.
3. Select the Tools menu and click Folder Options.
4. Select the View Tab.
5. Under the Hidden files and folders heading select Show hidden files and folders.
6. Uncheck the Hide protected operating system files (recommended) option.
7. Click Yes to confirm.
8. Click OK.

Search for and delete these folders:

C:\Program Files\Instant Message Grabber 2.x
C:\Program Files\WinAntiVirus Pro 2006
C:\Program Files\Viewpoint

Search for and delete this file:

C:\WINDOWS\SYSTEM32\winhdn32.dll

Reboot Windows normally. Then download and install the new version of Java.

Once done post a new HijackThis log please.
gettingbetter
July 16, 2006, 5:57 AM UTC
Thanks for the in-depth reply.

I did almost everything you said. There were a few steps I couldn't do, either because the files you indicated didn't exist (like the Firewall service or MGS ones) , or in the case of the winhdn32.dll file, it wouldn't let me delete it.

But I did everything I could in the list you gave me. Here is the new Hijackthis log:

==============================

Logfile of HijackThis v1.99.1
Scan saved at 1:47:01 AM, on 7/16/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\STOPzilla!\szserver.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Dantz\Retrospect\retrorun.exe
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\STOPzilla!\STOPzilla.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Documents and Settings\Foster Brown\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://www.yahoo.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Malicious Scripts Scanner - {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [STOPzilla] C:\Program Files\STOPzilla!\STOPzilla.exe /autostart
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [PrevxOne] C:\Program Files\Prevx1\PXConsole.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Yahoo! Desktop Search System Tray.lnk = C:\Program Files\Yahoo!\Yahoo! Desktop Search\YDSsystray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar3.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar3.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar3.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar3.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar3.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar3.dll/cmtrans.html
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .m4v: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin6.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsup ... mAData.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://www-secure.symantec.com/techsup ... gctlsi.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsup ... gctlsr.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} (Symantec Download Bridge) - http://a248.e.akamai.net/f/248/5462/2h/www.symantecstore.com/v2.0-img/operations/symbizpr/xcontrol/SymDlBrg.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: winhdn32 - C:\WINDOWS\SYSTEM32\winhdn32.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect\retrorun.exe
O23 - Service: Retrospect Helper - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect\rthlpsvc.exe
O23 - Service: Retrospect WD Service (RetroWDSvc) - Dantz Development Corporation - C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: STOPzilla Service (szserver) - Unknown owner - C:\Program Files\Common Files\STOPzilla!\szserver.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Program Files\RealVNC\VNC4\WinVNC4.exe" -service (file missing)


Thanks very much for all the help you've given. I'm sure the problem will be solved.
'KotaGuy
July 16, 2006, 4:51 PM UTC
Download KillBox.

Run the program. In the Full Path of File to Delete text field copy/paste:

C:\WINDOWS\SYSTEM32\winhdn32.dll

Select Delete on Reboot. Select End Explorer Shell While Killing File. Select Unregister .dll before Deleting(if not greyed out).

Click the red and white "X" then follow the prompts to reboot your Computer.

After the reboot post a new HijackThis log please.
gettingbetter
July 16, 2006, 5:27 PM UTC
Okay, I went ahead and did what you said in the previous post. Here is the HijackThis log now:

Logfile of HijackThis v1.99.1
Scan saved at 1:24:40 PM, on 7/16/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\STOPzilla!\szserver.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Dantz\Retrospect\retrorun.exe
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
C:\WINDOWS\system32\hphmon05.exe
C:\Program Files\STOPzilla!\STOPzilla.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Foster Brown\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://www.yahoo.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Malicious Scripts Scanner - {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [VAIO Update 2] "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [STOPzilla] C:\Program Files\STOPzilla!\STOPzilla.exe /autostart
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [PrevxOne] C:\Program Files\Prevx1\PXConsole.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Yahoo! Desktop Search System Tray.lnk = C:\Program Files\Yahoo!\Yahoo! Desktop Search\YDSsystray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar3.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar3.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar3.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar3.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar3.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar3.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\npjpi150_07.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\npjpi150_07.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .m4v: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin6.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsup ... mAData.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://www-secure.symantec.com/techsup ... gctlsi.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsup ... gctlsr.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} (Symantec Download Bridge) - http://a248.e.akamai.net/f/248/5462/2h/www.symantecstore.com/v2.0-img/operations/symbizpr/xcontrol/SymDlBrg.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect\retrorun.exe
O23 - Service: Retrospect Helper - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect\rthlpsvc.exe
O23 - Service: Retrospect WD Service (RetroWDSvc) - Dantz Development Corporation - C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: STOPzilla Service (szserver) - Unknown owner - C:\Program Files\Common Files\STOPzilla!\szserver.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Program Files\RealVNC\VNC4\WinVNC4.exe" -service (file missing)
'KotaGuy
July 16, 2006, 5:33 PM UTC
Thank you... your HijackThis log is now clean :thumbup:

You may have some malware still lurking about in places that HijackThis doesn't show us so I'd you to do a couple scans for me.

Please print out or copy these instructions/tutorial to Notepad as the internet will not be (while in Safe Mode) available to you at certain points of the removal process. Make sure to work through all the Steps in the exact order in which they are listed below. If there's anything that you don't understand, ask your question(s) before moving on with the fixes.

Please download Ewido to your Desktop or to your usual Download Folder.
http://www.ewido.net/en/download/
  • Install Ewido by double clicking the installer.
  • Follow the prompts. Make sure that Launch Ewido is checked.
  • On the main screen under Your Computer's security.
  • Click on Change state next to Resident shield. It should now change to inactive.
  • Next to Last Update, click on Update now. (You will need an active internet connection to perform this)
  • Wait until you see the Update succesfull message.
  • Right-click the Ewido Tray Icon and select Exit. Confirm by clicking Yes.
If you are having problems with the updater, you can use this link to manually update ewido.
Ewido manual updates.
Download the Full database to your Desktop or to your usual Download Folder and install it by double clicking the file. Make sure that Ewido is closed before installing the update.
______________________________

Reboot your computer in Safe Mode.
  • If the computer is running, shut down Windows, and then turn off the power.
  • Wait 30 seconds, and then turn the computer on.
  • Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
  • Ensure that the Safe Mode option is selected.
  • Press Enter. The computer then begins to start in Safe mode.
  • Login on your usual account.
______________________________

Navigate to C:\Windows\Temp
Click Edit, click Select All, press the DELETE key, and then click Yes to confirm that you want to send all the items to the Recycle Bin.

Navigate to C:\Documents and Settings\(EVERY LISTED USER)\Local Settings\Temp
Click Edit, click Select All, press the DELETE key, and then click Yes to confirm that you want to send all the items to the Recycle Bin.

Clean out your Temporary Internet files. Proceed like this:
  • Quit Internet Explorer and quit any instances of Windows Explorer.
  • Click Start, click Control Panel, and then double-click Internet Options.
  • On the General tab, click Delete Files under Temporary Internet Files.
  • In the Delete Files dialog box, tick the Delete all offline content check box , and then click OK.
  • On the General tab, click Delete Cookies under Temporary Internet Files, and then click OK.
  • Click on the Programs tab then click the Reset Web Settings button. Click Apply then OK.
  • Click OK.
Next Click Start, click Control Panel and then double-click Display. Click on the Desktop tab, then click the Customize Desktop button. Click on the Web tab. Under Web Pages you should see a checked entry called Security info or something similar. If it is there, select that entry and click the Delete button. Click Ok then Apply and Ok.

Empty the Recycle Bin by right-clicking the Recycle Bin icon on your Desktop, and then clicking Empty Recycle Bin.
______________________________

Close ALL open Windows / Programs / Folders. Please start Ewido and run a full scan.
  • Click on Scanner on the toolbar.
  • Click on the Settings tab.
  • Under How to act?
  • Click on Recommended Action and choose Quarantine from the popup menu.
[*]Under How to scan?
  • All checkboxes should be ticked.
[*]Under Possibly unwanted software:
  • All checkboxes should be ticked.
[*]Under Reports:
  • Select Automatically generate report after every scan and uncheck Only if threats were found.
[*]Under What to scan?
  • Select Scan every file.
  • Click on the Scan tab.
  • Click on Complete System Scan to start the scan process.
  • Let the program scan the machine.
  • When the scan has finished, follow the instructions below.
    IMPORTANT : Don't click on the "Save Scan Report" button before you did hit the "Apply all Actions" button.
  • Make sure that Set all elements to: shows Quarantine (1), if not click on the link and choose Quarantine from the popup menu. (2)
  • At the bottom of the window click on the Apply all Actions button. (3)
[*]When done, click the Save Scan Report button.
  • Click the Save Report as button.
  • Save the report to your Desktop.
  • Right-click the Ewido Tray Icon and select Exit. Confirm by clicking Yes.
Reboot in Normal Mode.
______________________________

Once back in Windows do an online scan with Kaspersky WebScanner

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
    • Scan using the following Anti-Virus database:
      Extended (if available otherwise Standard)
    • Scan Options:
      Scan Archives
      Scan Mail Bases
  • Click OK
  • Now under select a target to scan:
      Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
    • Now click on the Save as Text button:
  • Save the file to your desktop.


Post the Ewido log along with the KAV scan log please.

You may need to split the logs over a few posts so that they don't get cut off.
gettingbetter
July 17, 2006, 1:47 AM UTC
Okay, thanks for all that help - the annoying bgates[1].exe warning has finally gone away! Here is the rest of the logfiles as requested (part 1):

---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 5:46:40 PM 7/16/2006

+ Scan result:



HKU\S-1-5-21-3310852091-2963901935-275209368-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2178F3FB-2560-458F-BDEE-631E2FE0DFE4} -> Adware.WinAntiVirus : Cleaned with backup (quarantined).
C:\crack\070906\crack.exe -> Downloader.Adload.cw : Cleaned with backup (quarantined).
C:\crack\070906\osadobephotoshopcs2tryouttofullactivationkeygenoscaria.rar/crack.exe -> Downloader.Adload.cw : Cleaned with backup (quarantined).
C:\data -> Downloader.IstBar.nh : Cleaned with backup (quarantined).
C:\crack\070906\osadobephotoshopcs2tryouttofullactivationkeygenoscaria.rar/install.exe -> Downloader.Small.bwy : Cleaned with backup (quarantined).
C:\WINDOWS\system32\ishost.exe -> Downloader.Zlob.yx : Cleaned with backup (quarantined).
C:\Downloaded Programs\CrackSearcher.exe -> Not-A-Virus.HackTool.Win32.CrackSearch.a : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@247realmedia[2].txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined).
:mozilla.178:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.178:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.179:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.179:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.180:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.180:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.181:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.181:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.182:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.182:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.187:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.188:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.188:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.189:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.189:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.190:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.190:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.191:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.191:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
:mozilla.192:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@chicagosuntimes.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@cnn.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@ford.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@metacafe.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@salesforce.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.133:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.133:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.134:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.134:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.135:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.135:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.136:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.136:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.137:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.137:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.141:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.142:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.142:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.143:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.143:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.144:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.144:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.145:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.145:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.146:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.198:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.198:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.207:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.208:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned with backup (quarantined).
:mozilla.109:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined).
:mozilla.109:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined).
:mozilla.110:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined).
:mozilla.110:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined).
:mozilla.118:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined).
:mozilla.119:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined).
:mozilla.119:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined).
:mozilla.120:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Adserver : Cleaned with backup (quarantined).
:mozilla.234:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.234:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.235:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.235:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.236:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.236:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.237:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.237:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.243:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.244:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.244:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.245:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.245:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.246:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.246:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.247:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.89:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.90:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.91:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.92:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined).
:mozilla.19:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.20:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.38:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.38:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.43:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Burstbeacon : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.115:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.116:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.117:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.228:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.228:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.237:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.238:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.220:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Clickzs : Cleaned with backup (quarantined).
:mozilla.220:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Clickzs : Cleaned with backup (quarantined).
:mozilla.221:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Clickzs : Cleaned with backup (quarantined).
:mozilla.221:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Clickzs : Cleaned with backup (quarantined).
:mozilla.229:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Clickzs : Cleaned with backup (quarantined).
:mozilla.230:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Clickzs : Cleaned with backup (quarantined).
:mozilla.230:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Clickzs : Cleaned with backup (quarantined).
:mozilla.231:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Clickzs : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Clickzs : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Clickzs : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Clickzs : Cleaned with backup (quarantined).
:mozilla.174:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
:mozilla.174:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
:mozilla.175:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
:mozilla.175:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
:mozilla.183:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
:mozilla.184:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
:mozilla.184:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
:mozilla.185:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@com[2].txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Com : Cleaned with backup (quarantined).
:mozilla.113:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
:mozilla.113:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
:mozilla.154:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
:mozilla.154:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
:mozilla.163:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
:mozilla.164:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
:mozilla.22:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
:mozilla.23:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined).
:mozilla.18:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
:mozilla.19:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
:mozilla.25:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
:mozilla.25:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
:mozilla.38:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Esomniture : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Euroclick : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined).
:mozilla.211:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
:mozilla.211:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
:mozilla.220:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
:mozilla.221:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
:mozilla.84:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
:mozilla.87:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined).
:mozilla.199:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.199:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.200:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.200:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.201:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.201:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.202:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.202:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.208:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.209:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.209:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.210:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.210:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.211:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.211:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.212:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.219:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.219:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.228:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.229:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.229:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.229:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.238:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.239:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined).
:mozilla.203:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.203:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.204:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.204:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.205:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.205:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.206:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.206:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.212:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.213:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.213:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.214:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.214:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.215:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.215:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.216:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Hitslink : Cleaned with backup (quarantined).
:mozilla.57:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Hotlog : Cleaned with backup (quarantined).
:mozilla.57:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Hotlog : Cleaned with backup (quarantined).
:mozilla.66:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Hotlog : Cleaned with backup (quarantined).
:mozilla.67:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Hotlog : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@hypertracker[1].txt -> TrackingCookie.Hypertracker : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Liveperson : Cleaned with backup (quarantined).
:mozilla.143:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Masterstats : Cleaned with backup (quarantined).
:mozilla.143:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Masterstats : Cleaned with backup (quarantined).
:mozilla.151:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Masterstats : Cleaned with backup (quarantined).
:mozilla.152:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Masterstats : Cleaned with backup (quarantined).
:mozilla.93:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-5.txt -> TrackingCookie.Masterstats : Cleaned with backup (quarantined).
:mozilla.93:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-6.txt -> TrackingCookie.Masterstats : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Masterstats : Cleaned with backup (quarantined).
:mozilla.60:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined).
:mozilla.64:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined).
:mozilla.64:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined).
:mozilla.75:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined).
:mozilla.76:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Myaffiliateprogram : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Ne : Cleaned with backup (quarantined).
:mozilla.149:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Onestat : Cleaned with backup (quarantined).
:mozilla.149:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Onestat : Cleaned with backup (quarantined).
:mozilla.150:
gettingbetter
July 17, 2006, 1:47 AM UTC
Here is part two to the Ewido scan...

C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Onestat : Cleaned with backup (quarantined).
:mozilla.150:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Onestat : Cleaned with backup (quarantined).
:mozilla.157:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Onestat : Cleaned with backup (quarantined).
:mozilla.158:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Onestat : Cleaned with backup (quarantined).
:mozilla.158:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Onestat : Cleaned with backup (quarantined).
:mozilla.159:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Onestat : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Onestat : Cleaned with backup (quarantined).
:mozilla.213:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Overture : Cleaned with backup (quarantined).
:mozilla.213:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Overture : Cleaned with backup (quarantined).
:mozilla.222:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Overture : Cleaned with backup (quarantined).
:mozilla.223:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Overture : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Overture : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Overture : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Overture : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Overture : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@paypopup[1].txt -> TrackingCookie.Paypopup : Cleaned with backup (quarantined).
:mozilla.230:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.230:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.231:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.231:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.232:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.232:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.233:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.233:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.239:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.240:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.240:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.241:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.241:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.242:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.242:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
:mozilla.243:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@qksrv[2].txt -> TrackingCookie.Qksrv : Cleaned with backup (quarantined).
:mozilla.207:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined).
:mozilla.207:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined).
:mozilla.216:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined).
:mozilla.217:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Realcastmedia : Cleaned with backup (quarantined).
:mozilla.40:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.40:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.41:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.41:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.42:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.42:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.43:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.43:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.48:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.49:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.49:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.50:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.50:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.51:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.51:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.52:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Realtracker : Cleaned with backup (quarantined).
:mozilla.127:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
:mozilla.128:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
:mozilla.129:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
:mozilla.130:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
:mozilla.131:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
:mozilla.132:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
:mozilla.133:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
:mozilla.134:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@revenue[2].txt -> TrackingCookie.Revenue : Cleaned with backup (quarantined).
:mozilla.162:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Ru4 : Cleaned with backup (quarantined).
:mozilla.162:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Ru4 : Cleaned with backup (quarantined).
:mozilla.171:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Ru4 : Cleaned with backup (quarantined).
:mozilla.172:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Ru4 : Cleaned with backup (quarantined).
:mozilla.39:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined).
:mozilla.40:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined).
:mozilla.41:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined).
:mozilla.42:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed]-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@sexlist[1].txt -> TrackingCookie.Sexlist : Cleaned with backup (quarantined).
:mozilla.136:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-5.txt -> TrackingCookie.Sitestat : Cleaned with backup (quarantined).
:mozilla.136:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-6.txt -> TrackingCookie.Sitestat : Cleaned with backup (quarantined).
:mozilla.222:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Sitestat : Cleaned with backup (quarantined).
:mozilla.222:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Sitestat : Cleaned with backup (quarantined).
:mozilla.231:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Sitestat : Cleaned with backup (quarantined).
:mozilla.232:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Sitestat : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Specificclick : Cleaned with backup (quarantined).
:mozilla.56:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Spylog : Cleaned with backup (quarantined).
:mozilla.56:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Spylog : Cleaned with backup (quarantined).
:mozilla.65:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Spylog : Cleaned with backup (quarantined).
:mozilla.66:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Spylog : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Starware : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@starware[2].txt -> TrackingCookie.Starware : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][1].txt -> TrackingCookie.Starware : Cleaned with backup (quarantined).
:mozilla.223:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.223:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.224:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.224:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.225:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.225:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.232:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.233:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.233:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.234:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.234:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.235:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.49:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.50:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.104:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-5.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.104:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-6.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.105:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-5.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.105:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-6.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.160:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.160:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.161:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.161:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.169:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.170:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.170:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.171:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.34:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.35:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.36:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.37:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.94:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined).
:mozilla.218:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Targetnet : Cleaned with backup (quarantined).
:mozilla.218:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Targetnet : Cleaned with backup (quarantined).
:mozilla.227:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Targetnet : Cleaned with backup (quarantined).
:mozilla.228:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Targetnet : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@targetnet[1].txt -> TrackingCookie.Targetnet : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed]101[1].txt -> TrackingCookie.Tracking101 : Cleaned with backup (quarantined).
:mozilla.110:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined).
:mozilla.159:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined).
:mozilla.159:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined).
:mozilla.168:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined).
:mozilla.169:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined).
:mozilla.68:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.68:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.69:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.69:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.76:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.77:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.78:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.79:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.79:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.80:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.80:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.80:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.81:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.81:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.82:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
:mozilla.83:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@trafic[1].txt -> TrackingCookie.Trafic : Cleaned with backup (quarantined).
:mozilla.123:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
:mozilla.153:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
:mozilla.153:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
:mozilla.161:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
:mozilla.162:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
:mozilla.52:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
:mozilla.53:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
:mozilla.54:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
:mozilla.55:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
:mozilla.56:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
:mozilla.57:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Valuead : Cleaned with backup (quarantined).
:mozilla.107:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Valueclick : Cleaned with backup (quarantined).
:mozilla.108:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Valueclick : Cleaned with backup (quarantined).
:mozilla.110:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Valueclick : Cleaned with backup (quarantined).
:mozilla.111:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Valueclick : Cleaned with backup (quarantined).
:mozilla.97:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Valueclick : Cleaned with backup (quarantined).
:mozilla.97:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Valueclick : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@web-stat[1].txt -> TrackingCookie.Web-stat : Cleaned with backup (quarantined).
:mozilla.129:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.129:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.130:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.130:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.131:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.131:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.137:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.138:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.138:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.139:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.139:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.140:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.100:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yadro : Cleaned with backup (quarantined).
:mozilla.87:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yadro : Cleaned with backup (quarantined).
:mozilla.87:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yadro : Cleaned with backup (quarantined).
:mozilla.99:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yadro : Cleaned with backup (quarantined).
:mozilla.67:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.67:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.70:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.70:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.71:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.71:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.72:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.72:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.73:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.73:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.74:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.74:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.75:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.75:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.76:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.76:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.77:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.77:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.78:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.78:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.78:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.79:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.79:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.79:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.80:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.80:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.81:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.81:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.81:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.82:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.82:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.82:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.82:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.83:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.83:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.84:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.84:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.85:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.85:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.86:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.86:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.87:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.87:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.88:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.88:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.89:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.89:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.90:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.90:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.91:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.91:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.92:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.92:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.93:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.93:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.94:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ [removed][2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
C:\Documents and Settings\ Brown\Cookies\ brown@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.11:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.12:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.12:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.13:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.14:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.15:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-2.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.16:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.36:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.36:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.37:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-3.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.37:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-4.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.7:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.8:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.9:C:\Documents and Settings\ Brown\Application Data\Mozilla\Firefox\Profiles\afitlvbc.default\cookies-1.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined).
C:\!KillBox\winhdn32.dll -> Trojan.Mezzia : Cleaned with backup (quarantined).


::Report end
gettingbetter
July 17, 2006, 1:49 AM UTC
Per your request, here is the Kapersky scan:

Sunday, July 16, 2006 9:29:47 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 17/07/2006
Kaspersky Anti-Virus database records: 207775


Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true

Scan Target My Computer
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\

Scan Statistics
Total number of scanned objects 166848
Number of viruses found 14
Number of infected objects 107 / 0
Number of suspicious objects 0
Duration of the scan process 03:13:50

Infected Object Name Virus Name Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\STOPzilla!\targets.db Object is locked skipped

C:\Documents and Settings\All Users\Application Data\STOPzilla!\userdata.db Object is locked skipped

C:\Documents and Settings\All Users\Application Data\STOPzilla!\zilla.data Object is locked skipped

C:\Documents and Settings\All Users\Application Data\STOPzilla!\zilla.log Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped

C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2006-07-16_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped

C:\Documents and Settings\Foster Brown\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\Foster Brown\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\Foster Brown\Local Settings\Temp\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\Foster Brown\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Foster Brown\Local Settings\Temp\History\History.IE5\MSHist012006071620060717\index.dat Object is locked skipped

C:\Documents and Settings\Foster Brown\Local Settings\Temp\hpodvd09.log Object is locked skipped

C:\Documents and Settings\Foster Brown\Local Settings\Temp\Perflib_Perfdata_c60.dat Object is locked skipped

C:\Documents and Settings\Foster Brown\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\Foster Brown\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\Foster Brown\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Downloaded Programs\bsplayer141.832.zip/bsplayer141.832.exe/data0011 Infected: not-a-virus:AdWare.Win32.SaveNow.bo skipped

C:\Downloaded Programs\bsplayer141.832.zip/bsplayer141.832.exe Infected: not-a-virus:AdWare.Win32.SaveNow.bo skipped

C:\Downloaded Programs\bsplayer141.832.zip ZIP: infected - 2 skipped

C:\Downloaded Programs\imgrabber.exe/data0006 Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\Downloaded Programs\imgrabber.exe/data0008 Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\Downloaded Programs\imgrabber.exe/data0009 Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\Downloaded Programs\imgrabber.exe/data0010 Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\Downloaded Programs\imgrabber.exe/data0011 Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\Downloaded Programs\imgrabber.exe/data0012 Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\Downloaded Programs\imgrabber.exe/data0013 Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\Downloaded Programs\imgrabber.exe/data0022 Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\Downloaded Programs\imgrabber.exe NSIS: infected - 8 skipped

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsys.dll Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SNDALRT.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SNDCON.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SNDDBG.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SNDFW.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SNDIDS.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SNDSYS.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SPPolicy.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SPStart.log Object is locked skipped

C:\Program Files\Common Files\Symantec Shared\SPStop.log Object is locked skipped

C:\Program Files\Norton AntiVirus\AVApp.log Object is locked skipped

C:\Program Files\Norton AntiVirus\AVError.log Object is locked skipped

C:\Program Files\Norton AntiVirus\AVVirus.log Object is locked skipped

C:\Program Files\Norton AntiVirus\Quarantine\05141BB9.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\0A626EFD.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\0B4E3643.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\0B4F4DF8.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\0CAA28C3.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\0DCF53CA.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\11284464.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\113C1929.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\13ED3433.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\169E4F3C.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\17025B22.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\185669AC.exe/data0006 Infected: Trojan-Dropper.Win32.VB.nn skipped

C:\Program Files\Norton AntiVirus\Quarantine\185669AC.exe NSIS: infected - 1 skipped

C:\Program Files\Norton AntiVirus\Quarantine\185669AC.exe CryptFF: infected - 1 skipped

C:\Program Files\Norton AntiVirus\Quarantine\1A0234AD.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\1A996D28.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.cd skipped

C:\Program Files\Norton AntiVirus\Quarantine\1BC91C20.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\1C5B0536.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\1E470FAB.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\23272E96.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\24790B6B.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\24AB1B35.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\25A1606F.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\28FB715A.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\29527FCD.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\299A58F3.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\2ABD1B23.exe Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\2C0744D3.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\2EB85FDD.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\310C47E6.exe Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\35260112.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\352718C7.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\361D5298.exe Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\3678759D.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\37A14AA0.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\3A1214D3.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\3B000F34.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\3D772EC6.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\459E3CF2.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\469873A0.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\49A134D2.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\4D007965.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\4E846604.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\4EE74228.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\4F760142.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\4F7718F7.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\532647C6.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\55D762D0.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\570C0584.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\588C27D6.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\5E254D6B.exe Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\5EFF6396.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\60835035.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\61770329.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\61791570.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\674F7995.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\675F533B.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\67A077D5.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\68A1566B.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\6BFA4FA1.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\70FE3612.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\73797FA1.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\792773AA.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\794E4C11.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\794F63C6.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\79E70920.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\79F36C3C.exe Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\7AA46A98.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\7BC915A0.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\7BD80EB3.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\Norton AntiVirus\Quarantine\7DFA39D2.tmp Infected: Trojan.Win32.Dialer.pz skipped

C:\Program Files\RealVNC\VNC4\vncconfig.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped

C:\Program Files\RealVNC\VNC4\vncviewer.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped

C:\Program Files\RealVNC\VNC4\winvnc4.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped

C:\Program Files\RealVNC\VNC4\wm_hooks.dll Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP416\A0074289.exe Infected: Trojan-Dropper.Win32.Microjoin.bx skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP422\A0079183.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.cd skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP422\A0079385.exe/stream/data0007 Infected: not-a-virus:AdWare.Win32.AlexaBar.a skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP422\A0079385.exe/stream/data0008 Infected: not-a-virus:AdWare.Win32.AlexaBar.b skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP422\A0079385.exe/stream Infected: not-a-virus:AdWare.Win32.AlexaBar.b skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP422\A0079385.exe NSIS: infected - 3 skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP424\A0080439.exe Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP424\A0080440.exe Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP424\A0080447.exe Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP424\A0080448.dll Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP424\A0080449.dll Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP424\A0080450.dll Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP424\A0080451.dll Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP424\A0080452.dll Infected: not-a-virus:Monitor.Win32.IMGrabber.a skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP426\A0082617.dll Infected: Packed.Win32.Klone.g skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP426\A0082636.exe Infected: Trojan-Downloader.Win32.Agent.alr skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP426\A0082642.dll Infected: Packed.Win32.Klone.g skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP426\A0082643.exe Infected: Trojan-Downloader.Win32.Adload.cw skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP426\A0082644.exe Infected: Trojan-Downloader.Win32.Zlob.yx skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP426\A0082645.exe Infected: HackTool.Win32.CrackSearch.a skipped

C:\System Volume Information\_restore{400587B0-8271-42FB-9D8B-7E2D9247E9C7}\RP426\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped

C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped

C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped

C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped

C:\WINDOWS\system32\drivers\sptd4829.sys Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

========================

Thanks so much for all your help.
'KotaGuy
July 17, 2006, 2:18 AM UTC
OK... those look good... couple questions for you...

Are you still receiving warnings about srvrnw[1].exe?

And is RealVNC something you've installed on purpsose?
gettingbetter
July 17, 2006, 3:26 AM UTC
No, not receiving anymore notifications about srvnwwhatever.exe. And yes, I installed VNC on purpose. Need it for remote access.

By the way, since you are knowedgeable about these types of things, are there any other good remote access programs out there you'd recommend?

Again, thanks so much for this help. Those Norton notifications were getting awfully annoying!!!
'KotaGuy
July 17, 2006, 5:33 PM UTC
Depends on what you are using the remote access for and where you would to access it from.

Is this something where you would just access the remote PC from one computer.... like accessing your work computer from home. Or would you want to access the remote PC from anywhere?
'KotaGuy
July 17, 2006, 9:56 PM UTC
Answered your PM... anything else?