problem updating spybot, ad aware (RESOLVED)

madguy000 · #1 (**permalink**) 18-04-2006, 12:40 PM

i have followed instructions on the top of this forum for both spybot and ad aware, but lately i have been unable to update both software.
i am on a dsl line, no proxy servers, and windows xp.
anti virus is quick heal, and that updates without any problems. my firefox extensions update easily.
thosose two programs have not been altered when it comes to the updating settings.
what may be the problem?

VopThis · #2 (**permalink**) 18-04-2006, 02:43 PM

Can you post a HijackThis log? That may provide some clues as to what may be causing interference. Any recent alerts from your antivirus tool (and type of infection found)?

madguy000 · #3 (**permalink**) 18-04-2006, 03:01 PM

Quote:

Originally Posted by VopThis

Can you post a HijackThis log? That may provide some clues as to what may be causing interference. Any recent alerts from your antivirus tool (and type of infection found)?

Logfile of HijackThis v1.99.1
Scan saved at 7:29:48 PM, on 4/18/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\QUICKH~1\UPSCHD.EXE
C:\PROGRA~1\QUICKH~1\SCANMSG.EXE
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\QUICKH~1\OnlineNT.EXE
C:\PROGRA~1\QUICKH~1\ONLNSVC.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\GetRight\GETRIGHT.EXE
C:\Program Files\GetRight\GETRIGHT.EXE
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = http://clearsurfing.net/srch.php?qq=%s
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://in.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R3 - URLSearchHook: (no name) - {120B8547-2746-BD5C-4AE1-F6D84BE232B1} - Dest068.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {06ABAA2D-34AB-4902-A326-409BD9B9A7A5} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Email Protection] C:\PROGRA~1\QUICKH~1\EmlProxy.exe
O4 - HKLM\..\Run: [Update Scheduler] C:\PROGRA~1\QUICKH~1\UPSCHD.EXE /CHECK
O4 - HKLM\..\Run: [On-Line Protection] C:\PROGRA~1\QUICKH~1\CATEYE.EXE
O4 - HKLM\..\Run: [Messenger] C:\PROGRA~1\QUICKH~1\SCANMSG.EXE
O4 - HKLM\..\Run: [Startup Scan] C:\PROGRA~1\QUICKH~1\Sensor.EXE /LOADRUN
O4 - HKLM\..\RunOnce: [Startup Scan] C:\PROGRA~1\QUICKH~1\Sensor.EXE /check
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.iframedollars.biz (HKLM)
O16 - DPF: {08BEF711-06DA-48B2-9534-802ECAA2E4F9} (PlxInstall Class) - https://www.plaxo.com/down/release/PlaxoInstall.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - file://C:\TempEI4\EI40_\msxml4.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4519/mcfscan.cab
O16 - DPF: {FF1CD9A3-00CD-45C1-8182-4EEC229A182D} (Plaxo Auto-Import Utility) - https://www.plaxo.com/activex/plx_upldr-2k-xp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ABD13C3D-26F4-4B69-899A-8E5910AC0761}: NameServer = 218.248.255.145 61.1.96.71
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34545} - (no file)
O23 - Service: AOL Instant Messanger (AIM) - Unknown owner - C:\WINDOWS\aim.exe (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Network DDE Client (NetDDEclnt) - Unknown owner - C:\WINDOWS\System32\netddeclnt.exe (file missing)
O23 - Service: NT Online Protection - Unknown owner - C:\PROGRA~1\QUICKH~1\ONLNSVC.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: mxkkijbruhkl (oyilofik6) - Unknown owner - C:\WINDOWS\System32\wmyrosah6.exe (file missing)
O23 - Service: Quick Heal Helper Service WSC (qhwscsvc) - Unknown owner - C:\PROGRA~1\QUICKH~1\QHWSCSVC.EXE (file missing)
O23 - Service: Quick Heal Online Protection - Unknown owner - C:\PROGRA~1\QUICKH~1\QHONSVC.EXE (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

i see some entries for aol here. as im in a country whic aol does not service, can i remove those things?

madguy000 · #4 (**permalink**) 18-04-2006, 03:05 PM

Visrus problems existed... Quickheal was totally disabled, and system hanged if i shut down. i installed AVG after doing a dirty uninstall of quickheal, and it removed over 40 infected files, all trojans of some sort. this happened a month ago. this is my mom's pc, and i have just got back, so the info i provide will be 2nd hand.

VopThis · #5 (**permalink**) 18-04-2006, 03:32 PM

QuickHeal is still very much present. More than one AV tool in use at once can create conflicts. Quickheal is very unfamiliar to me and may be a (ineffective) rogue tool as well.

Please disable the following application(s), as it/they may hinder the removal of some entries. Otherwise, certain cleaning attempts may be wrongly recognized and blocked as hijacking attempts or other potentially inappropriate behavior. You can re-enable such tools after your computer is clean.

Spybot Search & Destroy (Teatimer)

1) Run Spybot-S&D
2) Go to the Mode menu, and make sure "Advanced Mode" is selected
3) On the left hand side, choose Tools -> Resident
4) Uncheck "Resident TeaTimer" and OK any prompts
5) Restart your computer.

Read over the following directions. Ask if anything appears unclear to you.

Download Clean.bat to your desktop: for later use to clean out your TEMPORARY and PREFETCH files.
http://www.thatcomputerguy.us/downloads/clean.bat

We will be restarting into Safe Mode later on in the fix and you might not be able to access the Internet. Accordingly, it is probably a good idea to print out the following directions or copy them to a text file on your desktop using NOTEPAD. Read these instructions carefully and feel free to ask if you're unsure about anything.

SELECT HijackThis FIX ITEMS: Scan with HijackThis and place a check next to these items:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R3 - URLSearchHook: (no name) - {120B8547-2746-BD5C-4AE1-F6D84BE232B1} - Dest068.dll (file missing)

O3 - Toolbar: (no name) - {06ABAA2D-34AB-4902-A326-409BD9B9A7A5} - (no file)

O4 - HKLM\..\Run: [EMAIL PROTECTION] C:\PROGRA~1\QUICKH~1\EmlProxy.exe
O4 - HKLM\..\Run: [UPDATE SCHEDULER] C:\PROGRA~1\QUICKH~1\UPSCHD.EXE /CHECK
O4 - HKLM\..\Run: [ON-LINE PROTECTION] C:\PROGRA~1\QUICKH~1\CATEYE.EXE
O4 - HKLM\..\Run: [MESSENGER] C:\PROGRA~1\QUICKH~1\SCANMSG.EXE
O4 - HKLM\..\Run: [STARTUP SCAN] C:\PROGRA~1\QUICKH~1\Sensor.EXE /LOADRUN
O4 - HKLM\..\RunOnce: [STARTUP SCAN] C:\PROGRA~1\QUICKH~1\Sensor.EXE /check

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34545} - (no file)
O23 - Service: AOL Instant Messanger (AIM) - Unknown owner - C:\WINDOWS\aim.exe (file missing)
O23 - Service: Network DDE Client (NetDDEclnt) - Unknown owner - C:\WINDOWS\System32\netddeclnt.exe (file missing)
O23 - Service: NT Online Protection - Unknown owner - C:\PROGRA~1\QUICKH~1\ONLNSVC.EXE

Make sure that all browser windows and internet links are closed, even this one!
CLICK ’FIX CHECKED’ with HijackThis.

HIDDEN FILES: To make sure you can see all hidden files, please follow the directions here

SAFEMODE: Boot into safe mode by tapping the F8 key at restart and choosing 'safe mode' menu option (explained here if needed).

Delete TEMPORARY FILES: Now, hunt down the most common temporary file locations and the temporary file clutter contained therein (and of possible malware hiding places):

Go to Start > Run and type: CLEANMGR.EXE and hit enter.
When prompted select the C: drive and click ok.
Check the boxes for:

Temporary Internet Files
Downloaded Program Files
Recycle Bin
Temporary Files

Click OK or Enter

For additional, more thorough cleaning and for multi-profile user configurations:
(*) Run Clean.bat to clean up your TEMPorary files.

***** Clean out the Recycle Bin for items removed below, ONLY once you have regained the full functional use of your PC.

Navigate to these files or folders using Windows Explorer (OR Start -> Search) and delete (if present):

DELETE FILES:

none specified

DELETE APPLICATION FOLDERS:
Go to Add/Remove Programs

In Control Panel>Add/Remove Programs look for any CLEARLY related entries for unwanted items listed below (or anything else you need to investigate or did not put in there).

C:\PROGRA~1\QUICKHEAL
or
C:\PROGRA~1\QUICKH~1

UNINSTALLER Alternate SEARCH (if needed): Otherwise, you may have to first locate and then try right-clicking on any of the given SEARCH FOLDER items ABOVE and further search (tick include subdirectories) for the following exact text:

*UNIN*.EXE, *UNW*.EXE

This may reveal an uninstaller with label terms such as '...uninstall...EXE', ‘unins000’, or 'unwise.EXE'. Double-click that EXE, if one is found, to remove that particular FOLDER and its contents. Thereafter, check to ensure that the folder is completely gone. Otherwise, consider deleting the folder in question.

(DELETE Other Misc. FOLDERS):

POST A REVISED HIJACKTHIS LOG for review:
Reboot and post a new HijackThis log with any feedback as appropriate - how things are now behaving: any new or remaining apparent issues.

madguy000 · #6 (**permalink**) 18-04-2006, 03:39 PM

Quote:

Originally Posted by VopThis

QuickHeal is still very much present. More than one AV tool in use at once can create conflicts. Quickheal is very unfamiliar to me and may be a (ineffective) rogue tool as well..

i forgot to tell you... i uninstalled AVG, an reinstalled quickheal again. so is it safe for me to presume that i should NOT check those entries you have listed out which have anything to do with quickheal?

VopThis · #7 (**permalink**) 18-04-2006, 03:52 PM

Quote:

i forgot to tell you... i uninstalled AVG, an reinstalled quickheal again.

If AVG found over 40 items I have to wonder how effective a tool it is. Your choice - it isn't even a tool that I am familair with, although it may have significant regional following.

madguy000 · #8 (**permalink**) 18-04-2006, 04:48 PM

this is the revised log. i have not uninstalled quickheal. it is an antivirus tool, and i cannot comment on its effectiveness since my mom is totally a novice in this and thus i don't know the exact events that occured during the antivirus problem.

spybot and ad aware still dont update. i have tried uninstalling and downloading the latest versions, but to no avail.

i will now try downloading the update files and report what has happened.

*** log follows

Logfile of HijackThis v1.99.1
Scan saved at 9:14:08 PM, on 4/18/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\QUICKH~1\ONLNSVC.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\QUICKH~1\EmlProxy.exe
C:\PROGRA~1\QUICKH~1\UPSCHD.EXE
C:\PROGRA~1\QUICKH~1\SCANMSG.EXE
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\QUICKH~1\OnlineNT.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = http://clearsurfing.net/srch.php?qq=%s
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://in.yahoo.com
R3 - URLSearchHook: (no name) - {120B8547-2746-BD5C-4AE1-F6D84BE232B1} - Dest068.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Email Protection] C:\PROGRA~1\QUICKH~1\EmlProxy.exe
O4 - HKLM\..\Run: [Update Scheduler] C:\PROGRA~1\QUICKH~1\UPSCHD.EXE /CHECK
O4 - HKLM\..\Run: [On-Line Protection] C:\PROGRA~1\QUICKH~1\CATEYE.EXE
O4 - HKLM\..\Run: [Messenger] C:\PROGRA~1\QUICKH~1\SCANMSG.EXE
O4 - HKLM\..\Run: [Startup Scan] C:\PROGRA~1\QUICKH~1\Sensor.EXE /LOADRUN
O4 - HKLM\..\RunOnce: [Startup Scan] C:\PROGRA~1\QUICKH~1\Sensor.EXE /check
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.iframedollars.biz (HKLM)
O16 - DPF: {08BEF711-06DA-48B2-9534-802ECAA2E4F9} (PlxInstall Class) - https://www.plaxo.com/down/release/PlaxoInstall.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - file://C:\TempEI4\EI40_\msxml4.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4519/mcfscan.cab
O16 - DPF: {FF1CD9A3-00CD-45C1-8182-4EEC229A182D} (Plaxo Auto-Import Utility) - https://www.plaxo.com/activex/plx_upldr-2k-xp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ABD13C3D-26F4-4B69-899A-8E5910AC0761}: NameServer = 218.248.255.145 61.1.96.71
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AOL Instant Messanger (AIM) - Unknown owner - C:\WINDOWS\aim.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Network DDE Client (NetDDEclnt) - Unknown owner - C:\WINDOWS\System32\netddeclnt.exe (file missing)
O23 - Service: NT Online Protection - Unknown owner - C:\PROGRA~1\QUICKH~1\ONLNSVC.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: mxkkijbruhkl (oyilofik6) - Unknown owner - C:\WINDOWS\System32\wmyrosah6.exe (file missing)
O23 - Service: Quick Heal Helper Service WSC (qhwscsvc) - Unknown owner - C:\PROGRA~1\QUICKH~1\QHWSCSVC.EXE (file missing)
O23 - Service: Quick Heal Online Protection - Unknown owner - C:\PROGRA~1\QUICKH~1\QHONSVC.EXE (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

VopThis · #9 (**permalink**) 18-04-2006, 06:45 PM

Please download, install, update and scan your system with the free (trial) version of Ewido TROJAN scanner
[Developed for Windows 2000 and XP]:

When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
When you run ewido for the first time, you will get a warning "Database could not be found!". Click OK. We will fix this in a moment.
From the main ewido screen, click on update in the left menu, then click the Start update button.
After the update finishes (the status bar at the bottom will display "Update successful"), click on the Scanner button in the left menu, then click on the Start button. This scan can take quite a while to run, so time to go get a drink and a snack....
If ewido finds anything, it will pop up a notification. You can select "clean" and check the boxes "Perform action with all infections" and "Create encrypted backup" before clicking on OK.
When the scan finishes, click on "Save Report". This will create a text file. Please then paste the contents of the text file to this thread.

Quote:

Note: Ewido is a free trial product for 14 days. Since Ewido is a trial version, the realtime guard and automatic update will stop functioning after 14 days. We are not installing the guard because it might interfere with the cleanup or the malware removal process. You can use Ewido as an on-demand scanner (recommended) but you will have to manually update the definition file each time you scan. If you decide to purchase Ewido, you can enable the 'Realtime Protect' and 'Automatic Update' functions by clicking on the 'Status' bar (Top left) and clicking on both items under "Your Security Status".

REBOOT.

Please do an online scan (scan only tool) with Kaspersky WebScanner

[Internet Explorer required]
Go to Kaspersky website: www.kaspersky.com/virusscanner and click on the Kaspersky Online Scanner BUTTON/BOX.

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

The program will launch and then begin downloading the latest definition files:
Once the files have been downloaded click on NEXT
Now click on Scan Settings
In the scan settings make sure that the following are selected:
- Scan using the following Anti-Virus database:
  - Extended (if available otherwise Standard)
- Scan Options:
  - Scan Archives
  - Scan Mail Bases
Click OK
Now under select a target to scan:
- Select My Computer
This program will start and scan your system.
The scan will take a while so be patient and let it run.
Once the scan is complete it will display if your system has been infected.
- Now click on the Save as Text button:
Save the file to your desktop.
Copy and paste that information in your next post.

You might also want to run this scan as an added check:

[Internet Explorer required]
Place a shortcut to Panda ActiveScan on your desktop (FREE Version is mostly a scan only tool) .

Run the Panda ActiveScan shortcut.
- Once you are on the Panda site click the Scan your PC button
- A new window will open...click the Check Now button
- Enter your Country
- Enter your State/Province
- Enter your e-mail address and click send
- Select either Home User or Company
- Click the big Scan Now button
- If it wants to install an ActiveX component allow it
- It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
- When download is complete, click on Local Disks to start the scan
- When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location.

Post a Panda log back here, if anything is reported.

madguy000 · #10 (**permalink**) 19-04-2006, 04:52 AM

** logfile 1

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 9:16:49 AM, 4/19/2006
+ Report-Checksum: E829B8F8

+ Scan result:

C:\Documents and Settings\R Sanyal\Cookies\r sanyal@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\R Sanyal\Cookies\r sanyal@com[1].txt -> TrackingCookie.Com : Cleaned with backup
C:\Documents and Settings\R Sanyal\Cookies\r sanyal@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.60:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.61:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.62:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.63:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.64:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.72:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.73:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.74:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.87:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.88:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.96:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.97:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.98:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.99:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.110:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.111:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.112:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.116:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Clickhype : Cleaned with backup
:mozilla.122:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.123:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.126:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.127:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.128:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.129:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.130:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.131:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.132:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.149:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.152:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.153:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.154:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.160:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.161:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.162:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.163:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.164:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.165:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.166:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.182:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.183:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.184:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.185:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.186:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.187:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.188:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.189:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.202:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.203:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.204:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.205:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.206:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.207:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.208:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.212:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.260:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.261:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.262:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.265:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.280:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.281:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.282:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.290:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Myaffiliateprogram : Cleaned with backup
:mozilla.294:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.295:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.296:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.313:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.314:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.315:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.316:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.317:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.318:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.319:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.321:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.322:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.323:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.324:C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
C:\Documents and Settings\R Sanyal\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loa deradv410.jar-5e82ef8f-3838974c.zip/Matrix.class -> Downloader.OpenStream.c : Cleaned with backup
C:\Documents and Settings\R Sanyal\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loa deradv410.jar-5e82ef8f-3838974c.zip/Dummy.class -> Not-A-Virus.Exploit.ByteVerify : Cleaned with backup
C:\Documents and Settings\R Sanyal\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\cou nt.jar-3b347171-74318e52.zip/Dummy.class -> Not-A-Virus.Exploit.ByteVerify : Cleaned with backup
C:\Documents and Settings\URMILA\Cookies\urmila@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Cleaned with backup
C:\Documents and Settings\URMILA\Cookies\urmila@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned with backup
C:\Documents and Settings\URMILA\Cookies\urmila@revenue[1].txt -> TrackingCookie.Revenue : Cleaned with backup
C:\Documents and Settings\URMILA\Cookies\urmila@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned with backup
C:\Documents and Settings\URMILA\Cookies\urmila@microsoftwga.112.2o 7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\URMILA\Cookies\urmila@microsofteup.112.2o 7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\URMILA\Cookies\urmila@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.26:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.27:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.28:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.30:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.31:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.32:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.33:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.34:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.39:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.48:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.49:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.50:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.51:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.52:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.53:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.54:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.55:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.56:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.84:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Bluestreak : Cleaned with backup
:mozilla.86:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.87:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.88:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.89:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.90:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.91:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.92:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.93:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.94:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.95:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.99:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.102:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.103:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.104:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.132:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Specificclick : Cleaned with backup
:mozilla.133:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.138:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.139:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.154:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.155:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.156:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.157:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Centrport : Cleaned with backup
:mozilla.158:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Centrport : Cleaned with backup
:mozilla.159:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.160:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.161:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.162:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.163:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.177:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.178:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.181:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Estat : Cleaned with backup
:mozilla.248:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.254:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.257:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.258:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.259:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.260:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.275:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.276:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.280:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.281:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.282:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.292:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Weborama : Cleaned with backup
:mozilla.300:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.301:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.302:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.303:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.310:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.311:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.312:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.314:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.328:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.338:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.339:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.340:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.344:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.345:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.346:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.347:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.353:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.382:C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
C:\Documents and Settings\RISHI\Cookies\rishi@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\RISHI\Cookies\rishi@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.6:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.7:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.8:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.9:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.11:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.12:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.14:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.15:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.16:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.17:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.18:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.19:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.37:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.43:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.44:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.45:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.46:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.47:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.48:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.49:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.75:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.76:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.78:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.79:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.80:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.81:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.82:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.83:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.84:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.85:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-8.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.11:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-8.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.13:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-8.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.14:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-8.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.13:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-30.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.9:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-36.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.7:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-2.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.8:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-2.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.6:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-3.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.7:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-3.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.9:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-3.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-3.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.7:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-4.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.8:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-4.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-4.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.11:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-4.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.6:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-5.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.7:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-5.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-5.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.11:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-5.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.9:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-6.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-6.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.13:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-6.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.14:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-6.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.9:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-7.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-7.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.13:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-7.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.14:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-7.txt -> TrackingCookie.Sextracker : Cleaned with backup
:mozilla.9:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-11.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.9:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-12.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.6:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-13.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.6:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-14.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.9:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-15.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-16.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-17.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-18.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-19.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-20.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-21.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-22.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.10:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-23.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.12:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-24.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.13:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-25.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.13:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-26.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.13:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-27.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.13:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-28.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.13:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-29.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.6:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-32.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.9:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-33.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.9:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-34.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.9:C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-35.txt -> TrackingCookie.Atdmt : Cleaned with backup
H:\WINDOWS\SYSTEM32\TFTP3796 -> Heuristic.Win32.Morphine-Crypted : Cleaned with backup
H:\WINDOWS\SYSTEM32\TFTP220 -> Heuristic.Win32.Morphine-Crypted : Cleaned with backup
H:\WINDOWS\SYSTEM32\TFTP276 -> Heuristic.Win32.Morphine-Crypted : Cleaned with backup
H:\WINDOWS\SYSTEM32\TFTP1700 -> Heuristic.Win32.Morphine-Crypted : Cleaned with backup
H:\WINDOWS\SYSTEM32\TFTP1564 -> Backdoor.SdBot.kn : Cleaned with backup
H:\WINDOWS\SYSTEM32\TFTP2932 -> Heuristic.Win32.Morphine-Crypted : Cleaned with backup
H:\WINDOWS\SYSTEM32\TFTP5268 -> Backdoor.Rbot.ak : Cleaned with backup
H:\WINDOWS\SYSTEM32\TFTP3572 -> Backdoor.SdBot.jt : Cleaned with backup
:mozilla.12:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.16:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.17:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.18:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.19:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.21:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.22:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
-> : Error during cleaning
:mozilla.24:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.37:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.43:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.54:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.55:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.56:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.64:H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.12:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.13:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.14:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.20:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.26:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Centrport : Cleaned with backup
:mozilla.28:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Centrport : Cleaned with backup
:mozilla.29:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.35:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
-> : Error during cleaning
:mozilla.48:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Bluemountain : Cleaned with backup
:mozilla.49:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Bluemountain : Cleaned with backup
:mozilla.50:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Bluemountain : Cleaned with backup
:mozilla.51:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Bluemountain : Cleaned with backup
:mozilla.52:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Bluemountain : Cleaned with backup
:mozilla.53:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.57:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.58:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.60:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Gator : Cleaned with backup
:mozilla.65:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Trafic : Cleaned with backup
:mozilla.70:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.71:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.72:H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
H:\System Volume Information\_restore{30ACCB63-9768-451B-9BA0-61867B2D0E0D}\RP329\A0368057.EXE -> Heuristic.Win32.Backdoor.IrcBot : Cleaned with backup

::Report End

****

***logfile 2

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Wednesday, April 19, 2006 9:15:35 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.78.0
Kaspersky Anti-Virus database last update: 18/04/2006
Kaspersky Anti-Virus database records: 177362
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
K:\

Scan Statistics:
Total number of scanned objects: 193935
Number of viruses found: 5
Number of infected objects: 10
Number of suspicious objects: 0
Duration of the scan process: 04:48:47

Infected Object Name / Virus Name / Last Action
C:\Recycled\Q330995.exe Infected: Trojan-Downloader.Win32.Small.amb skipped
H:\RISHI2\Vallabh hard dsk\LyriCS\whigfield\Lyrics WHIGFIELD - SEXY EYES Song Lyrics_files\CA01TMN6.htm Infected: Trojan-Downloader.JS.FlingStone skipped
H:\RISHI2\Vallabh hard dsk\LyriCS\whigfield\Lyrics WHIGFIELD - SATURDAY NIGHT Song Lyrics_files\CALD7SMN.htm Infected: Trojan-Downloader.JS.FlingStone skipped
H:\RISHI2\Vallabh hard dsk\LyriCS\goo goo dolls\Lyrics GOO GOO DOLLS - IRIS Song Lyrics_files\CAEB8P2J.htm Infected: Trojan-Downloader.JS.FlingStone skipped
H:\Documents and Settings\Internet\Local Settings\Temporary Internet Files\Content.IE5\J29P8CSZ\ied_s7[1].chm/ied_s7.htm Infected: Trojan-Downloader.JS.Small.x skipped
H:\Documents and Settings\Internet\Local Settings\Temporary Internet Files\Content.IE5\J29P8CSZ\ied_s7[1].chm CHM: infected - 1 skipped
H:\System Volume Information\_restore{30ACCB63-9768-451B-9BA0-61867B2D0E0D}\RP329\A0368057.EXE Infected: Backdoor.Win32.Wootbot.gen skipped
H:\System Volume Information\_restore{30ACCB63-9768-451B-9BA0-61867B2D0E0D}\RP339\A0378520.BAT Infected: Trojan.BAT.NoShare.ao skipped
H:\System Volume Information\_restore{30ACCB63-9768-451B-9BA0-61867B2D0E0D}\RP339\A0378521.BAT Infected: Trojan.BAT.NoShare.ao skipped
H:\System Volume Information\_restore{30ACCB63-9768-451B-9BA0-61867B2D0E0D}\RP339\A0378522.BAT Infected: Trojan.BAT.NoShare.ao skipped

Scan process completed.

***

***logfile 3 panda

Incident Status Location

Adware:adware/winprotect Not disinfected C:\WINDOWS\HELP\CHMRedir.chm
Dialer:dialer.xd Not disinfected C:\WINDOWS\switchagreement.txt
Adware:adware/ist.istbar Not disinfected C:\PROGRAM FILES\COMMON FILES\Totem Shared
Adware:adware/navipromo Not disinfected Windows Registry
Dialer:dialer.dgi Not disinfected HKEY_LOCAL_MACHINE\SOFTWARE\MPB
Adware:adware/mediatickets Not disinfected Windows Registry
Spyware:Cookie/Microsofte Not disinfected C:\Documents and Settings\R Sanyal\Cookies\r sanyal@microsofteup.112.2o7[1].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\R Sanyal\Cookies\r sanyal@com[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\R Sanyal\Cookies\r sanyal@belnk[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\R Sanyal\Cookies\r sanyal@dist.belnk[2].txt
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\R Sanyal\Cookies\r sanyal@ads.pointroll[2].txt
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.bravenet.com/]
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.statcounter.com/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.tribalfusion.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.doubleclick.net/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.atdmt.com/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.fastclick.net/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.ads.pointroll.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[ad.yieldmanager.com/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.questionmarket.com/]
Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.trafficmp.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.serving-sys.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.112.2o7.net/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.2o7.net/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.overture.com/]
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.casalemedia.com/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.com.com/]
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.adrevolver.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.adtech.de/]
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.belnk.com/]
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.burstnet.com/]
Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.revenue.net/]
Spyware:Cookie/myaffiliateprogram Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.www.myaffiliateprogram.com/]
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[.zedo.com/]
Spyware:Cookie/Clicktracks Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[stats1.clicktracks.com/]
Dialer

ialer.Gen Not disinfected C:\WINDOWS\switchagreement.txt
Spyware:Cookie/Microsofte Not disinfected C:\Documents and Settings\R Sanyal\Cookies\r sanyal@microsofteup.112.2o7[1].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\R Sanyal\Cookies\r sanyal@com[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\R Sanyal\Cookies\r sanyal@belnk[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\R Sanyal\Cookies\r sanyal@dist.belnk[2].txt
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\R Sanyal\Cookies\r sanyal@ads.pointroll[2].txt
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\R Sanyal\Application Data\Mozilla\Firefox\Profiles\fsc6hxae.default\coo kies.txt[]
Virus:Exploit/ByteVerify Disinfected C:\Documents and Settings\R Sanyal\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loa deradv410.jar-5e82ef8f-3838974c.zip[Matrix.class]
Virus:Exploit/ByteVerify Disinfected C:\Documents and Settings\R Sanyal\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\loa deradv410.jar-5e82ef8f-3838974c.zip[Dummy.class]
Virus:Exploit/ByteVerify Disinfected C:\Documents and Settings\R Sanyal\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\cou nt.jar-3b347171-74318e52.zip[Dummy.class]
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\URMILA\Cookies\urmila@belnk[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\URMILA\Cookies\urmila@dist.belnk[2].txt
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\URMILA\Cookies\urmila@ads.pointroll[2].txt
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\URMILA\Cookies\urmila@serving-sys[1].txt
Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\URMILA\Cookies\urmila@revenue[1].txt
Spyware:Cookie/NewMedia Not disinfected C:\Documents and Settings\URMILA\Cookies\urmila@anm.co[2].txt
Spyware:Cookie/Bs.serving-sys Not disinfected C:\Documents and Settings\URMILA\Cookies\urmila@bs.serving-sys[1].txt
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\URMILA\Cookies\urmila@microsoftwga.112.2o 7[1].txt
Spyware:Cookie/Microsofte Not disinfected C:\Documents and Settings\URMILA\Cookies\urmila@microsofteup.112.2o 7[1].txt
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\URMILA\Cookies\urmila@questionmarket[1].txt
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\cqptep63.default\coo kies.txt[]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\RISHI\Cookies\rishi@2o7[1].txt
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies.txt[]
Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-8.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-30.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-36.txt[]
Spyware:Cookie/Sextracker Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-2.txt[]
Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-3.txt[]
Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-4.txt[]
Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-5.txt[]
Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-6.txt[]
Spyware:Cookie/cs.sexcounter Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-7.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-11.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-12.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-13.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-14.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-15.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-16.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-17.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-18.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-19.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-20.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-21.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-22.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-23.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-24.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-25.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-26.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-27.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-28.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-29.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-32.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-33.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-34.txt[]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\RISHI\Application Data\Mozilla\Firefox\Profiles\kz1p9vo5.default\coo kies-35.txt[]
Adware:Adware/IST.ISTBar Not disinfected C:\Program Files\Common Files\Totem Shared\Update\Distribution.dll.045
Adware:Adware/IST.ISTBar Not disinfected C:\Program Files\Common Files\Totem Shared\Update\Music.dll.022
Adware:Adware/IST.ISTBar Not disinfected C:\Program Files\Common Files\Totem Shared\Update\Windows.dll.072
Adware:Adware/IST.ISTBar Not disinfected C:\Program Files\Common Files\Totem Shared\Update\WindowsEx.dll.041
Possible Virus. Not disinfected C:\Program Files\Windows Media Player\wmplayer.exe.tmp
Adware:Adware/SearchExe Not disinfected C:\Recycled\Q330995.exe
Virus:W32/Sdbot.AAO.worm Disinfected H:\WINDOWS\SYSTEM32\TFTP3796
Virus:W32/Sdbot.AAO.worm Disinfected H:\WINDOWS\SYSTEM32\TFTP220
Virus:W32/Sdbot.AAO.worm Disinfected H:\WINDOWS\SYSTEM32\TFTP276
Virus:W32/Sdbot.AAO.worm Disinfected H:\WINDOWS\SYSTEM32\TFTP1700
Virus:W32/Sdbot.AAO.worm Disinfected H:\WINDOWS\SYSTEM32\TFTP1564
Virus:W32/Sdbot.AAO.worm Disinfected H:\WINDOWS\SYSTEM32\TFTP2932
Virus:W32/Gaobot.AYP.worm Disinfected H:\WINDOWS\SYSTEM32\TFTP3956
Virus:W32/Gaobot.AYP.worm Disinfected H:\WINDOWS\SYSTEM32\TFTP1740
Virus:W32/Gaobot.AYP.worm Disinfected H:\WINDOWS\SYSTEM32\TFTP1760
Virus:W32/Sdbot.ATE.worm Disinfected H:\WINDOWS\SYSTEM32\TFTP3572
Virus:Trj/Delshare.I Disinfected H:\Documents and Settings\R SANYAL\Local Settings\Temp\secure.bat
Spyware:Cookie/Atlas DMT Not disinfected H:\Documents and Settings\R SANYAL\Application Data\Mozilla\Firefox\Profiles\mnlgznf2.default\coo kies.txt[]
Virus:Trj/Delshare.I Disinfected H:\Documents and Settings\Internet\Local Settings\Temp\secure.bat
Virus:Trj/Delshare.I Disinfected H:\Documents and Settings\URMILA\Local Settings\Temp\secure.bat
Spyware:Cookie/Advertising Not disinfected H:\Documents and Settings\URMILA\Application Data\Mozilla\Firefox\Profiles\8gk8btpo.default\coo kies.txt[]