Jump to content


Photo

Now it's time for the pros.


  • Please log in to reply
3 replies to this topic

#1 akerstim

akerstim

    Member

  • Full Member
  • Pip
  • 2 posts

Posted 29 June 2007 - 10:14 AM

I have used avg, adaware, avast, norton, iolo sys. mech., spybot, plus all the recommendations of windows and ie explorer and I'm still getting pops. The funny thing about it is most of the pop-ups are for winantivruspro and other types of reg cleaner programs as well as zedo sites, yahoo permission sites, etc. So I decided to come here in hopes that I can get help. I've read the forum faq and I believe have everything to get started. The following are the HiJackThis (1) and the AVG AntiSpyWare (2) logs:



Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 3:08:03 PM, on 6/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\WINDOWS\system32\ofps.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\D-Link\Air Utility\AirCFG.exe
C:\Program Files\Alpha Networks\ANIWZCS Service\WZCSLDR.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ScanSoft\OmniPagePro14.0\WorkFlowTray.exe
C:\Program Files\ScanSoft\OmniPagePro14.0\Opware14.exe
C:\Program Files\ScanSoft\OmniPagePro14.0\OpScheduler.exe
C:\Program Files\ScanSoft\OmniForm 5.1\OFPA.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\WINDOWS\system32\qzuvkbkp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe
C:\Program Files\iolo\System Mechanic Professional 7\AntiVirus\ioloAV.exe
C:\Program Files\iolo\System Mechanic Professional 7\Personal Firewall\ioloFW.exe
C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\FileOpen\plug_ins\FileOpenAPI.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iolo\System Mechanic Professional 7\AntiVirus\iAVEmailScanner.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Documents and Settings\User\Desktop\HiJackThis\HiJackThis_v2.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapp...//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.c...rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapp...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O2 - BHO: (no name) - {0FA316E7-E440-4DA4-A9C1-065EB8552A53} - C:\WINDOWS\system32\vturs.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5ADF3862-9E2E-4ad3-86F7-4510E6550CD0} - C:\WINDOWS\system32\dwosynoy.dll
O2 - BHO: (no name) - {5B359A47-FA92-4D8F-B5DD-42550C843E76} - (no file)
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {8A61098D-612B-4EF2-943D-64E920684061} - C:\WINDOWS\system32\qomljjj.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LMSXXD] LMSXXD.exe
O4 - HKLM\..\Run: [D-Link Air Utility] C:\Program Files\D-Link\Air Utility\AirCFG.exe
O4 - HKLM\..\Run: [ANIWZCSService] C:\Program Files\Alpha Networks\ANIWZCS Service\WZCSLDR.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [VTPreset] VTPreset.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [WorkFlowTray] "C:\Program Files\ScanSoft\OmniPagePro14.0\WorkFlowTray.exe"
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SManager] smanager.7.exe
O4 - HKLM\..\Run: [qzuvkbkp.exe] C:\WINDOWS\system32\qzuvkbkp.exe
O4 - HKLM\..\Run: [vmbenwxy.exe] C:\WINDOWS\system32\vmbenwxy.exe
O4 - HKLM\..\Run: [PDF4 Registry Controller] "C:\Program Files\ScanSoft\PDF Professional 4.0\\RegistryController.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe"
O4 - HKLM\..\Run: [iolo AntiVirus] "C:\Program Files\iolo\System Mechanic Professional 7\AntiVirus\ioloAV.exe"
O4 - HKLM\..\Run: [GPLv3] rundll32.exe "C:\WINDOWS\system32\gywqrvqs.dll",realset
O4 - HKLM\..\Run: [iolo Personal Firewall] "C:\Program Files\iolo\System Mechanic Professional 7\Personal Firewall\ioloFW.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKCU\..\Run: [DW4] "C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - Startup: DirectDVD Update Manager.lnk.disabled
O4 - Startup: FileOpenAPI.exe.lnk = C:\Program Files\FileOpen\plug_ins\FileOpenAPI.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk.disabled
O4 - Global Startup: Status Monitor.lnk.disabled
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Office Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with ScanSoft PDF Converter 4.0 - res://C:\Program Files\ScanSoft\PDF Professional 4.0\cnvres_eng.dll /100
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\iavlsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\iavlsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\iolo\common\firewall\ifw_xfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\iolo\common\firewall\ifw_xfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\iolo\common\firewall\ifw_xfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\iolo\common\firewall\ifw_xfilter.dll
O10 - Unknown file in Winsock LSP: c:\program files\iolo\common\firewall\ifw_xfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\iavlsp.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1104557939656
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1164729641062
O16 - DPF: {A762E064-A885-40E4-AC10-671BB62DC2B2} (OFMailHTMLCtl Class) - http://www.eomniform...ins/OFMailX.cab
O16 - DPF: {CE8267C2-D41A-4A50-A69D-F32B5C289F14} (FileOpenInstaller) - http://plugin.fileop...nt/FileOpen.CAB
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://download.game...r/goldfever.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.popcap.co...aploader_v6.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30155.www3.h.../qdiagh.cab?326
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logme...ivex/RACtrl.cab
O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (DownloadManager Control) - http://dlm.tools.aka...vex-2.2.1.2.cab
O20 - Winlogon Notify: qomljjj - C:\WINDOWS\SYSTEM32\qomljjj.dll
O20 - Winlogon Notify: vturs - C:\WINDOWS\system32\vturs.dll
O20 - Winlogon Notify: winjvd32 - winjvd32.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\pboabnpd.exe (file missing)
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
O23 - Service: iolo DMV Service (ioloDMV) - Unknown owner - C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: OmniForm Printer - ScanSoft, Inc. - C:\WINDOWS\system32\ofps.exe

--
End of file - 12418 bytes






---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 4:42:24 PM 6/28/2007

+ Scan result:



C:\Documents and Settings\All Users\Application Data\iolo\AntiVirus\Quarantined\A0069667.EXE.INFECTED -> Adware.Softomate : Ignored.
C:\Documents and Settings\All Users\Application Data\iolo\AntiVirus\Quarantined\A0069849.EXE.INFECTED/crack.exe -> Adware.Virtumonde : Ignored.
C:\Documents and Settings\All Users\Application Data\iolo\AntiVirus\Quarantined\DC287.EXE.INFECTED/crack.exe -> Adware.Virtumonde : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP570\A0067642.dll -> Adware.Virtumonde : Ignored.
C:\WINDOWS\system32\qomljjj.dll -> Adware.Virtumonde : Ignored.
C:\WINDOWS\system32\yayxwtq.dll -> Adware.Virtumonde : Ignored.
[1364] C:\WINDOWS\system32\qomljjj.dll -> Adware.Virtumonde : Ignored.
[1768] C:\WINDOWS\system32\qomljjj.dll -> Adware.Virtumonde : Ignored.
[2248] C:\WINDOWS\system32\qomljjj.dll -> Adware.Virtumonde : Ignored.
[692] C:\WINDOWS\system32\vturs.dll -> Adware.Virtumonde : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP576\A0071220.exe -> Downloader.Agent.bsr : Ignored.
C:\WINDOWS\system32\vmbenwxy.exe -> Downloader.Agent.bsr : Ignored.
C:\ynudp.exe -> Downloader.Agent.bsr : Ignored.
C:\ynudp.exe~ -> Downloader.Agent.bsr : Ignored.
C:\WINDOWS\system32\scchk32.exe~ -> Downloader.Agent.bvn : Ignored.
C:\Documents and Settings\All Users\Application Data\iolo\AntiVirus\Quarantined\A0069849.EXE.INFECTED/keygen.exe -> Downloader.LoadAdv : Ignored.
C:\Documents and Settings\All Users\Application Data\iolo\AntiVirus\Quarantined\DC287.EXE.INFECTED/keygen.exe -> Downloader.LoadAdv : Ignored.
C:\WINDOWS\Downloaded Program Files\popcaploader.dll -> Not-A-Virus.Downloader.Win32.PopCap.b : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP530\A0059752.dll -> Not-A-Virus.RemoteAdmin.Win32.RemotelyAnywhere.a : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP531\A0059772.dll -> Not-A-Virus.RemoteAdmin.Win32.RemotelyAnywhere.a : Ignored.
C:\WINDOWS\system32\LMIinit.dll.000.bak -> Not-A-Virus.RemoteAdmin.Win32.RemotelyAnywhere.a : Ignored.
:mozilla.157:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.253:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.257:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.277:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.354:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.435:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.2o7 : Ignored.
:mozilla.508:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.2o7 : Ignored.
C:\Documents and Settings\User\Cookies\user@bookspan.122.2o7[1].txt -> TrackingCookie.2o7 : Ignored.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq1C.tmp -> TrackingCookie.2o7 : Ignored.
C:\Documents and Settings\User\Cookies\user@www.abcsearch[1].txt -> TrackingCookie.Abcsearch : Ignored.
:mozilla.13:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Adbrite : Ignored.
:mozilla.14:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Adbrite : Ignored.
:mozilla.386:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Adjuggler : Ignored.
:mozilla.387:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Adjuggler : Ignored.
:mozilla.614:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Adobe : Ignored.
C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{B04EEAB2-ABD1-4A75-8656-4E17E745256A}.txt/{B04EEAB2-ABD1-4A75-8656-4E17E745256A}.txt -> TrackingCookie.Advertising : Ignored.
C:\Documents and Settings\User\Cookies\user@advertising[2].txt -> TrackingCookie.Advertising : Ignored.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq1E.tmp -> TrackingCookie.Advertising : Ignored.
C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{AB086F53-0822-4E1A-8908-0786025DC27A}.txt/{AB086F53-0822-4E1A-8908-0786025DC27A}.txt -> TrackingCookie.Atdmt : Ignored.
C:\Documents and Settings\User\Cookies\user@atdmt[2].txt -> TrackingCookie.Atdmt : Ignored.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq1F.tmp -> TrackingCookie.Atdmt : Ignored.
:mozilla.626:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Burstbeacon : Ignored.
:mozilla.838:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Burstbeacon : Ignored.
:mozilla.627:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Burstnet : Ignored.
:mozilla.839:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Burstnet : Ignored.
:mozilla.22:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Com : Ignored.
C:\Documents and Settings\User\Cookies\user@com[1].txt -> TrackingCookie.Com : Ignored.
C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{76367F59-174A-4262-9AA6-08EA04885348}.txt/{76367F59-174A-4262-9AA6-08EA04885348}.txt -> TrackingCookie.Cpvfeed : Ignored.
C:\Documents and Settings\User\Cookies\user@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Ignored.
C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{B093E521-53DC-4184-8D87-0827BF81B29E}.txt/{B093E521-53DC-4184-8D87-0827BF81B29E}.txt -> TrackingCookie.Doubleclick : Ignored.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq20.tmp -> TrackingCookie.Doubleclick : Ignored.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq22.tmp -> TrackingCookie.Findwhat : Ignored.
:mozilla.81:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Gemius : Ignored.
:mozilla.82:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Gemius : Ignored.
:mozilla.86:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Hotlog : Ignored.
:mozilla.409:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Liveperson : Ignored.
:mozilla.97:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Masterstats : Ignored.
C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{CB74DAA8-4299-44D3-9B02-74D5CC22B3FC}.txt/{CB74DAA8-4299-44D3-9B02-74D5CC22B3FC}.txt -> TrackingCookie.Mediaplex : Ignored.
C:\Documents and Settings\User\Cookies\user@mediaplex[2].txt -> TrackingCookie.Mediaplex : Ignored.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq25.tmp -> TrackingCookie.Mediaplex : Ignored.
:mozilla.454:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Netflame : Ignored.
C:\Documents and Settings\User\Cookies\user@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Ignored.
:mozilla.455:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Onestat : Ignored.
:mozilla.456:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Onestat : Ignored.
:mozilla.457:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Onestat : Ignored.
:mozilla.458:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Onestat : Ignored.
:mozilla.246:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Overture : Ignored.
:mozilla.247:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Overture : Ignored.
:mozilla.248:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Overture : Ignored.
:mozilla.263:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Overture : Ignored.
:mozilla.732:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Paypal : Ignored.
:mozilla.15:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Pointroll : Ignored.
:mozilla.16:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Pointroll : Ignored.
:mozilla.17:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Pointroll : Ignored.
:mozilla.18:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Pointroll : Ignored.
C:\Documents and Settings\User\Cookies\user@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Ignored.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq28.tmp -> TrackingCookie.Pointroll : Ignored.
:mozilla.285:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Qksrv : Ignored.
:mozilla.286:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Qksrv : Ignored.
:mozilla.291:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Questionmarket : Ignored.
:mozilla.292:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Questionmarket : Ignored.
:mozilla.293:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Questionmarket : Ignored.
C:\Documents and Settings\User\Cookies\user@questionmarket[2].txt -> TrackingCookie.Questionmarket : Ignored.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq26.tmp -> TrackingCookie.Questionmarket : Ignored.
:mozilla.315:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Real : Ignored.
:mozilla.316:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Real : Ignored.
:mozilla.317:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Real : Ignored.
:mozilla.318:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Real : Ignored.
:mozilla.319:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Real : Ignored.
:mozilla.320:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Real : Ignored.
:mozilla.210:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.211:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.212:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.321:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.322:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.323:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.324:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.325:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.326:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.327:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.328:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.329:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Realmedia : Ignored.
:mozilla.356:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revenue : Ignored.
:mozilla.361:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.362:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.363:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.364:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.365:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.366:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.367:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.368:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.369:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.370:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.371:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.372:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.373:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
:mozilla.374:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Revsci : Ignored.
C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{8A5909CA-C071-4E46-9525-E199581C9723}.txt/{8A5909CA-C071-4E46-9525-E199581C9723}.txt -> TrackingCookie.Revsci : Ignored.
C:\Documents and Settings\User\Cookies\user@revsci[2].txt -> TrackingCookie.Revsci : Ignored.
:mozilla.410:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Serving-sys : Ignored.
:mozilla.411:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Serving-sys : Ignored.
:mozilla.412:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Serving-sys : Ignored.
:mozilla.413:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Serving-sys : Ignored.
:mozilla.414:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Serving-sys : Ignored.
:mozilla.21:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Sitestat : Ignored.
:mozilla.544:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Starware : Ignored.
:mozilla.72:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Starware : Ignored.
:mozilla.73:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Starware : Ignored.
:mozilla.498:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Tacoda : Ignored.
:mozilla.499:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Tacoda : Ignored.
:mozilla.500:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Tacoda : Ignored.
:mozilla.518:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Toplist : Ignored.
:mozilla.521:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.522:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.523:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.524:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.525:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.526:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.527:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.528:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.529:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.530:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Trafficmp : Ignored.
:mozilla.531:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Trafic : Ignored.
:mozilla.536:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.537:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.538:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.539:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.540:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.541:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Tribalfusion : Ignored.
C:\Program Files\Yahoo!\YPSR\Quarantine\ppq27.tmp -> TrackingCookie.Tribalfusion : Ignored.
:mozilla.339:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Valuead : Ignored.
:mozilla.340:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Valuead : Ignored.
:mozilla.341:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Valuead : Ignored.
:mozilla.342:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Valuead : Ignored.
:mozilla.343:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Valuead : Ignored.
:mozilla.143:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Webtrends : Ignored.
:mozilla.834:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Webtrends : Ignored.
C:\Documents and Settings\User\Cookies\user@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Ignored.
:mozilla.812:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Yadro : Ignored.
:mozilla.823:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.824:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.830:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Yieldmanager : Ignored.
:mozilla.831:C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt/{5384BA54-1372-4192-AC8B-4A18DD83370D}.txt -> TrackingCookie.Yieldmanager : Ignored.
C:\Documents and Settings\User\Application Data\iolo\SafetyNet\Manual\{02C1E8F1-DDAF-464E-815A-24AC77EC6200}\{522B6AC7-8673-4EFC-8CA9-2864691FA7F9}.txt/{522B6AC7-8673-4EFC-8CA9-2864691FA7F9}.txt -> TrackingCookie.Zedo : Ignored.
C:\Documents and Settings\User\Cookies\user@zedo[1].txt -> TrackingCookie.Zedo : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP569\A0067533.exe -> Trojan.Agent.aoy : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP572\A0068689.exe -> Trojan.Agent.aoy : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP573\A0069662.exe -> Trojan.Agent.aoy : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP573\A0069663.exe -> Trojan.Agent.aoy : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP573\A0069664.exe -> Trojan.Agent.aoy : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP573\A0069665.exe -> Trojan.Agent.aoy : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP573\A0069666.exe -> Trojan.Agent.aoy : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP573\A0069672.exe -> Trojan.Agent.aoy : Ignored.
C:\WINDOWS\system32\akjlmxtf.exe -> Trojan.Agent.aoy : Ignored.
C:\System Volume Information\_restore{4DB596BE-C2A3-49D6-AC65-83AB4504FFAC}\RP564\A0067189.exe -> Trojan.Small.oa : Ignored.


::Report end

#2 SWI Support Robot

SWI Support Robot

    Helper robot

  • SWI Bot
  • PipPipPipPipPip
  • 23,520 posts

Posted 01 July 2007 - 03:56 PM

Welcome to SWI. We apologize for the delay; our helpers have been very busy.
If you have not received help after 3 days, please CLICK HERE, and post a link to your log and the date it was originally posted.

Thank you for your patience.

[this is an automated reply]
This is an automated message. It does not count as help.

#3 pomp

pomp

    Forum Deity

  • Helper
  • PipPipPipPipPip
  • 1,163 posts

Posted 03 July 2007 - 09:54 AM

Hello and sorry for the delay!

Please do the following:

1. Download this file - combofix
2. Double click combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall




PLEASE DON'T PM ME OR EMAIL ME WITH HELP ON LOGS :). POST IN THE FORUM INSTEAD

#4 akerstim

akerstim

    Member

  • Full Member
  • Pip
  • 2 posts

Posted 05 July 2007 - 11:34 AM

OK, combofix is finished and here is the log...thanks in advance:


"User" - 2007-07-05 11:21:58 - ComboFix 07-07-04.4 - Service Pack 2


(((((((((((((((((((((((((((((((((((((((((((( V Log )))))))))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\awvvv.dll
C:\WINDOWS\system32\deivcngp.dll
C:\WINDOWS\system32\jlpmwngq.dll
C:\WINDOWS\system32\lptjmouu.dll
C:\WINDOWS\system32\vbvodhbf.dll
C:\WINDOWS\system32\vmecoykm.dll
C:\WINDOWS\system32\yayxwtq.dll
C:\WINDOWS\system32\vvvwa.ini
C:\WINDOWS\system32\srutv.bak1
C:\WINDOWS\system32\srutv.bak2
C:\WINDOWS\system32\srutv.ini
C:\WINDOWS\system32\srutv.ini2
C:\WINDOWS\system32\srutv.tmp
C:\WINDOWS\system32\pgncvied.ini
C:\WINDOWS\system32\qgnwmplj.ini
C:\WINDOWS\system32\uuomjtpl.ini
C:\WINDOWS\system32\fbhdovbv.ini
C:\WINDOWS\system32\mkyocemv.ini
C:\WINDOWS\system32\srutv.bak1
C:\WINDOWS\system32\srutv.bak2
C:\WINDOWS\system32\srutv.ini
C:\WINDOWS\system32\srutv.ini2
C:\WINDOWS\system32\srutv.tmp
C:\WINDOWS\system32\srutv.bak1
C:\WINDOWS\system32\srutv.bak2
C:\WINDOWS\system32\srutv.ini
C:\WINDOWS\system32\srutv.ini2
C:\WINDOWS\system32\srutv.tmp
C:\WINDOWS\system32\vturs.dll
C:\WINDOWS\system32\qomljjj.dll


* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *



((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\DOCUME~1\ALLUSE~1\APPLIC~1.\TEMP
C:\WINDOWS\wr.txt


((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


-------\LEGACY_DOMAINSERVICE
-------\DomainService


((((((((((((((((((((((((( Files Created from 2007-06-05 to 2007-07-05 )))))))))))))))))))))))))))))))


2007-07-05 11:19 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-07-02 16:28 <DIR> d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\Zeon
2007-07-02 16:05 524,288 --ah----- C:\DOCUME~1\ADMINI~1\NTUSER.DAT
2007-07-02 15:46 <DIR> d-------- C:\DOCUME~1\User\DoctorWeb
2007-06-28 15:25 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-06-27 11:19 126,976 --a------ C:\WINDOWS\system32\iavlsp.dll
2007-06-27 11:18 696,320 --a------ C:\WINDOWS\system32\libeay32.dll
2007-06-27 11:18 155,648 --a------ C:\WINDOWS\system32\ssleay32.dll
2007-06-27 11:18 <DIR> d-------- C:\Program Files\iolo
2007-06-27 11:18 <DIR> d-------- C:\Program Files\Common Files\Authentium
2007-06-27 11:18 <DIR> d-------- C:\DOCUME~1\LOCALS~1\APPLIC~1\iolo
2007-06-27 10:53 <DIR> d-------- C:\DOCUME~1\User\APPLIC~1\iolo
2007-06-27 10:53 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\iolo
2007-06-26 15:07 <DIR> d-------- C:\Program Files\MSXML 6.0
2007-06-26 13:13 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-06-25 14:47 <DIR> d-------- C:\Program Files\Windows Defender
2007-06-25 14:15 <DIR> d-------- C:\Program Files\Common Files\Scanner
2007-06-23 08:47 <DIR> d-------- C:\Program Files\Symantec
2007-06-23 08:47 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
2007-06-23 08:46 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared
2007-06-22 17:27 4,628 --a------ C:\WINDOWS\system32\vkxtnaga.exe
2007-06-22 12:19 <DIR> d-------- C:\spoolerlogs
2007-06-21 12:21 <DIR> d-------- C:\DOCUME~1\User\APPLIC~1\WinRAR
2007-06-20 14:29 <DIR> d-------- C:\DOCUME~1\User\APPLIC~1\Zeon
2007-06-20 14:17 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\zeon
2007-06-19 14:45 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
2007-06-19 11:10 <DIR> d-------- C:\DOCUME~1\User\APPLIC~1\Download Manager


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-05 14:51:47 -------- d-----w C:\Program Files\LogMeIn
2007-06-29 00:55:03 -------- d-----w C:\Program Files\SudokuSolver
2007-06-25 18:15:20 -------- d-----w C:\Program Files\Yahoo!
2007-06-25 18:13:42 -------- d--h--r C:\DOCUME~1\User\APPLIC~1\yahoo!
2007-06-20 19:02:36 -------- d-----w C:\DOCUME~1\User\APPLIC~1\ScanSoft
2007-06-20 18:17:15 -------- d-----w C:\Program Files\ScanSoft
2007-06-13 12:51:20 -------- d-----w C:\Program Files\MySpace
2007-05-25 19:22:30 83,552 ----a-w C:\WINDOWS\system32\LMIRfsClientNP.dll
2007-05-25 19:22:10 26,176 ----a-w C:\WINDOWS\system32\LMIport.dll
2007-05-25 19:22:08 10,304 ----a-w C:\WINDOWS\system32\LMImirr2.dll
2007-05-25 19:22:06 24,000 ----a-w C:\WINDOWS\system32\LMImirr.dll
2007-05-25 19:22:04 63,040 ----a-w C:\WINDOWS\system32\LMIinit.dll
2007-05-22 23:14:58 8,784 ----a-w C:\WINDOWS\system32\ractrlkeyhook.dll
2007-05-16 15:12:02 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-05-09 07:07:51 -------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-04-25 14:21:15 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
2007-04-18 16:12:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-17 02:47:36 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2007-04-17 02:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-17 02:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-04-17 02:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-04-17 02:45:36 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-04-17 02:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-04-17 02:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-04-17 02:45:20 43,352 ----a-w C:\WINDOWS\system32\wups2.dll
2007-04-17 02:44:20 271,224 ----a-w C:\WINDOWS\system32\mucltui.dll
2007-04-17 02:44:18 208,248 ----a-w C:\WINDOWS\system32\muweb.dll
2007-02-27 20:23:47 1,056 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
2007-05-30 17:18 808472 --a------ C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
2005-05-31 01:04 853672 --a------ C:\PROGRA~1\SPYBOT~1\SDHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5B359A47-FA92-4D8F-B5DD-42550C843E76}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}]
2006-10-31 16:29 198136 --a------ C:\Program Files\Yahoo!\Common\yiesrvc.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
2007-03-14 03:43 501400 --a------ C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
2006-10-12 11:38 2108480 -ra------ c:\program files\google\googletoolbar4.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Cmaudio"="cmicnfg.cpl" []
"LMSXXD"="LMSXXD.exe" []
"D-Link Air Utility"="C:\Program Files\D-Link\Air Utility\AirCFG.exe" [2003-09-23 19:04]
"ANIWZCSService"="C:\Program Files\Alpha Networks\ANIWZCS Service\WZCSLDR.exe" [2003-08-21 17:12]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-08-11 16:30]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-08-11 16:30]
"VTPreset"="VTPreset.exe" [2004-02-24 20:17 C:\WINDOWS\system32\VTPreset.exe]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-08-08 15:21]
"SSBkgdUpdate"="C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 10:22]
"WorkFlowTray"="C:\Program Files\ScanSoft\OmniPagePro14.0\WorkFlowTray.exe" [2004-03-08 14:34]
"LogMeIn GUI"="C:\Program Files\LogMeIn\x86\LogMeInSystray.exe" [2007-04-17 14:03]
"PDF4 Registry Controller"="C:\Program Files\ScanSoft\PDF Professional 4.0\\RegistryController.exe" [2006-08-22 19:09]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-07-01 09:47]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-07-02 11:54]
"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [2006-09-07 13:19]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DW4"="C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe" [2006-04-19 09:30]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56]
"YSearchProtection"="C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe" [2007-03-28 18:10]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2007-05-30 08:29]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
LMIinit.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Guard]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Opware14"="C:\Program Files\ScanSoft\OmniPagePro14.0\Opware14.exe"
"OpScheduler"="C:\Program Files\ScanSoft\OmniPagePro14.0\OpScheduler.exe"
"OmniForm OFPA"=C:\Program Files\ScanSoft\OmniForm 5.1\OFPA.exe


Contents of the 'Scheduled Tasks' folder
2007-07-05 14:53:15 C:\WINDOWS\tasks\MP Scheduled Scan.job

**************************************************************************

catchme 0.3.915 W2K/XP/Vista - rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-05 11:48:35
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-07-05 11:51:51 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-07-05 11:51

--- E O F ---




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button