Another dl.exe virus problem

Humanji · #1 (**permalink**) 17-06-2006, 01:32 PM

Hi all,
Just found the site while looking for info on this virus, and I have to say I'm pretty impressed. I guess I'll stick around

Anyway, enough grovelling...

My parents PC has gotten a virus. I was trying to patch a game with a file my mate put on a disk for my and I'm pretty sure that's where it cam from. He got the virus on his computer and it was found with McAfee. He ended up formatting his computer completely. The following happens when I boot up the folks' computer:

1) a window appears called dl.exe, with a message box labelled "16 bit MS-DOS Subsystem" that says "The NTVDM CPU has encountered an illegal instruction. CS:06da IP:03d8 OP:63 3d 22 68 74 Choose "close" to terminate application." It gives me a close/ignore option. Ignore seems to do nothing, and close closes it. (If I do nothing then more windows appear saying the same thing).

2) Twice, I got an error box called "iexplore.exe-Application error" saying, "The instruction at "0x76f6122f" referenced memory at "0xfeeefef6". The memory could not be "read".

3) The internet connection was cut.

4) Daemon tools causes an error on startup

5) The search option on the computer doesn't work.

6) And somehow, Norton Anti-Virus has been wiped from the computer (it could have been my parents who did this, they're not sure). I tried to install McAfee, but in starts to load, and then a blank white box appears and nothing happens. I have to shut it down in Task Manager. But now, everytime the computer starts, McAfee starts to install and freezes in the same place.

I've looked through this site and found a few people with the same problem and have tried to follow instructions given to them, but they haven't worked for me.

I have run HijackThis and here is the log:

************************************************** ********************
************************************************** ********************

Logfile of HijackThis v1.99.1
Scan saved at 21:04:43, on 16/06/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ati2sgag.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\System32\Tablet.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIA HE.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiprbxx.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
c:\program files\mcafee.com\shared\mghtml.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
D:\Program Files\Belkin\Nostromo\nost_LM.exe
C:\Program Files\Logitech\Harmony Remote\harmonyClient.exe
C:\Program Files\ScanWizard 5\ScannerFinder.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
D:\Documents and Settings\Hugh.MONTY\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://paintdoodles.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Interactive Watercolour
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1629.0\en-gb\msntb.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [gcasDtServ] gcasDtServ.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo R240 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIA HE.EXE /P30 "EPSON Stylus Photo R240 Series" /O6 "USB001" /M "Stylus Photo R240"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\3.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
O4 - HKLM\..\Run: [VSProSetup] D:\DOCUME~1\HUGH~1.MON\LOCALS~1\Temp\vsp9enus.tmp\ setup.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Loadout Manager.lnk = D:\Program Files\Belkin\Nostromo\nost_LM.exe
O4 - Global Startup: Logitech Harmony Remote.lnk = C:\Program Files\Logitech\Harmony Remote\harmonyClient.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Scanner Finder.lnk = C:\Program Files\ScanWizard 5\ScannerFinder.exe
O4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\system32\WTablet\TabUserW.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbar...rch.jhtml?p=ZU
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://paintdoodles.com
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} - http://download.abacast.com/download...basetup144.cab
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Cdrismb - Unknown owner - (no file)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\System32\Tablet.exe

************************************************** ********************
************************************************** ********************

I've found the "dl.exe" file on it's own in the root directory and deleted it in Safe mode in the hopes that it would be that easy to cure, but unsuprisingly it didn't. I can't search for more instances of the file, since the search option doesn't work. I've tried the /windows/ and /windows/system32 but haven't found anything and am unsure as to where else I could look.

I downloaded WinSockFix (I should probably point out that I'm downloading from another computer and copying over with a pen drive), but it did nothing.

I ran WebRoot SpySweeper, but couldn't update due to the lack of internet connection. It found 500 or so dodgy files and removed or quarantined what it could. But the problem persists. Here is the log file anyway:

************************************************** ********************
************************************************** ********************
---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 23:28:05, 16/06/2006
+ Report-Checksum: 15185BBD

+ Scan result:

C:\Program Files\Microsoft AntiSpyware\Quarantine\CA25BC98-3FC0-4161-ACD4-8B3103\56CA8B95-DCB4-4C50-862D-67AC17 -> Adware.AdHelper : Cleaned with backup
:mozilla.10

:\Documents and Settings\Colin.MONTY\Application Data\Mozilla\Firefox\Profiles\bfv63g8p.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.48

:\Documents and Settings\Colin.MONTY\Application Data\Mozilla\Firefox\Profiles\bfv63g8p.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.49

:\Documents and Settings\Colin.MONTY\Application Data\Mozilla\Firefox\Profiles\bfv63g8p.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.50

:\Documents and Settings\Colin.MONTY\Application Data\Mozilla\Firefox\Profiles\bfv63g8p.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.51

:\Documents and Settings\Colin.MONTY\Application Data\Mozilla\Firefox\Profiles\bfv63g8p.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.52

:\Documents and Settings\Colin.MONTY\Application Data\Mozilla\Firefox\Profiles\bfv63g8p.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.53

:\Documents and Settings\Colin.MONTY\Application Data\Mozilla\Firefox\Profiles\bfv63g8p.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.123

:\Documents and Settings\Colin.MONTY\Application Data\Mozilla\Firefox\Profiles\bfv63g8p.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.124

:\Documents and Settings\Colin.MONTY\Application Data\Mozilla\Firefox\Profiles\bfv63g8p.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.125

:\Documents and Settings\Colin.MONTY\Application Data\Mozilla\Firefox\Profiles\bfv63g8p.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
D:\Documents and Settings\Colin.MONTY\Cookies\colin@com[1].txt -> TrackingCookie.Com : Cleaned with backup
D:\Documents and Settings\Colin.MONTY\Cookies\colin@www.realcastmed ia[2].txt -> TrackingCookie.Realcastmedia : Cleaned with backup
:mozilla.22

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.23

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.24

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.26

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.27

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.28

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.29

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.30

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.31

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.37

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.38

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.39

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.40

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Bluestreak : Cleaned with backup
:mozilla.56

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.57

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.58

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.59

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.62

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.63

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.64

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.65

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.68

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.69

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.70

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.71

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.72

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.82

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.247realmedia : Cleaned with backup
:mozilla.83

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.247realmedia : Cleaned with backup
:mozilla.85

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.86

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.87

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.90

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.91

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.92

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.93

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.94

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.95

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.105

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.106

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.107

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.108

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.109

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.110

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.115

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Yadro : Cleaned with backup
:mozilla.117

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Yadro : Cleaned with backup
:mozilla.124

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.125

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.129

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.131

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.132

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.133

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.134

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.142

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.147

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Realtracker : Cleaned with backup
:mozilla.148

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Realtracker : Cleaned with backup
:mozilla.157

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.158

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.159

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.160

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.166

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.167

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.174

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.180

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.182

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Starware : Cleaned with backup
:mozilla.183

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Starware : Cleaned with backup
:mozilla.184

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Starware : Cleaned with backup
:mozilla.198

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.199

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.200

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.212

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.218

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.219

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.220

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.221

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.225

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.226

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.227

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.232

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.233

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.236

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.239

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.240

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.242

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Bfast : Cleaned with backup
:mozilla.267

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.268

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.269

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.289

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.290

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.295

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.296

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.297

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.298

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.299

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.308

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.309

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.312

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.313

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.326

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.327

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.331

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.332

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.349

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Adorigin : Cleaned with backup
:mozilla.351

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Adorigin : Cleaned with backup
:mozilla.352

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Adorigin : Cleaned with backup
:mozilla.353

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Adorigin : Cleaned with backup
:mozilla.354

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Adorigin : Cleaned with backup
:mozilla.355

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Adorigin : Cleaned with backup
:mozilla.358

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.362

:\Documents and Settings\Helen.MONTY\Application Data\Mozilla\Firefox\Profiles\j24brbn0.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
D:\Documents and Settings\Helen.MONTY\Cookies\helen@com[2].txt -> TrackingCookie.Com : Cleaned with backup
D:\Documents and Settings\Helen.MONTY\Cookies\helen@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup
D:\Documents and Settings\Helen.MONTY\Cookies\helen@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup
D:\Documents and Settings\Helen.MONTY\Cookies\helen@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned with backup
D:\Documents and Settings\Helen.MONTY\Cookies\helen@webstat[2].txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.43

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.71

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.117

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hotlog : Cleaned with backup
:mozilla.118

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Spylog : Cleaned with backup
:mozilla.150

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.151

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.152

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.153

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.154

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.178

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.179

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.180

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.181

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.182

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.183

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.184

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.185

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.186

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.187

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.188

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.189

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.190

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.191

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.192

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.193

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.194

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.195

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.196

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.197

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.198

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.199

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.200

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.201

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Cqcounter : Cleaned with backup
:mozilla.211

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.212

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.232

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Cqcounter : Cleaned with backup
:mozilla.233

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.234

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.253

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.254

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.255

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.271

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Enhance : Cleaned with backup
:mozilla.310

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Yadro : Cleaned with backup
:mozilla.320

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Linksynergy : Cleaned with backup
:mozilla.322

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Linksynergy : Cleaned with backup
:mozilla.323

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.334

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.335

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.336

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Web-stat : Cleaned with backup
:mozilla.345

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.346

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.347

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.348

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.372

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.374

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.376

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Clickbank : Cleaned with backup
:mozilla.378

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Masterstats : Cleaned with backup
:mozilla.388

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.429

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.430

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.432

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.434

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.435

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.459

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.469

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.481

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.482

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.483

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.484

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.516

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Bluestreak : Cleaned with backup
:mozilla.526

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.527

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.528

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.529

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.544

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.570

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.571

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.572

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.573

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.574

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.581

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Bfast : Cleaned with backup
:mozilla.582

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.583

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.584

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.591

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.592

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.593

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.594

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.595

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.596

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.597

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.598

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.599

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.600

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.601

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.602

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.603

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.604

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.605

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.612

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.613

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.614

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.615

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.623

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.624

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.625

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.632

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.636

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.639

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Estat : Cleaned with backup
:mozilla.641

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.642

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.643

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.644

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.645

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.648

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.649

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.650

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.651

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.652

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.653

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.657

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.660

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.661

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.668

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.671

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.685

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.686

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.687

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.688

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.689

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.690

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.691

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.696

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.697

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.724

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Counted : Cleaned with backup
:mozilla.732

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.733

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.734

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.735

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.736

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.760

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Weborama : Cleaned with backup
:mozilla.761

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Weborama : Cleaned with backup
:mozilla.780

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.247realmedia : Cleaned with backup
:mozilla.781

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.247realmedia : Cleaned with backup
:mozilla.793

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.794

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.796

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.797

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.801

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.809

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.810

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.813

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.814

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.815

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.820

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.821

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.833

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.834

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.855

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Adviva : Cleaned with backup
:mozilla.857

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Adviva : Cleaned with backup
:mozilla.859

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Adviva : Cleaned with backup
:mozilla.862

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.866

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.875

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.879

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.886

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.887

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.930

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.934

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Centrport : Cleaned with backup
:mozilla.935

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Centrport : Cleaned with backup
:mozilla.954

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.955

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.973

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.976

:\Documents and Settings\Henry\Application Data\Mozilla\Firefox\Profiles\l7iocbgo.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@com[2].txt -> TrackingCookie.Com : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@e-2dj6wjkokhajskp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@ehg-autotrader.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@ehg-bskyb.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@ehg-crain.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@ehg-esa.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@ehg-nfusiongroup.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@ehg-oreilly.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@estat[1].txt -> TrackingCookie.Estat : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@komtrack[2].txt -> TrackingCookie.Komtrack : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@phg.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@webstat[1].txt -> TrackingCookie.Web-stat : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Cleaned with backup
D:\Documents and Settings\Henry\Cookies\henry@y-1shz2prbmdj6wvny-1sez2pra2dj6wjlyqndzehog2dj6x9ny-1seq-2-2.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned with backup
D:\Documents and Settings\Henry\Local Settings\Temp\asmfiles.cab/asm.exe -> Adware.Altnet : Cleaned with backup
:mozilla.16

:\Documents and Settings\Hugh.MONTY\Application Data\Mozilla\Firefox\Profiles\amv86l28.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.17

:\Documents and Settings\Hugh.MONTY\Application Data\Mozilla\Firefox\Profiles\amv86l28.default\coo kies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.18

:\Documents and Settings\Hugh.MONTY\Application Data\Mozilla\Firefox\Profiles\amv86l28.default\coo kies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.19

:\Documents and Settings\Hugh.MONTY\Application Data\Mozilla\Firefox\Profiles\amv86l28.default\coo kies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.25

:\Documents and Settings\Hugh.MONTY\Application Data\Mozilla\Firefox\Profiles\amv86l28.default\coo kies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.26

:\Documents and Settings\Hugh.MONTY\Application Data\Mozilla\Firefox\Profiles\amv86l28.default\coo kies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.27

:\Documents and Settings\Hugh.MONTY\Application Data\Mozilla\Firefox\Profiles\amv86l28.default\coo kies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.28

:\Documents and Settings\Hugh.MONTY\Application Data\Mozilla\Firefox\Profiles\amv86l28.default\coo kies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.29

:\Documents and Settings\Hugh.MONTY\Application Data\Mozilla\Firefox\Profiles\amv86l28.default\coo kies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.30

:\Documents and Settings\Hugh.MONTY\Application Data\Mozilla\Firefox\Profiles\amv86l28.default\coo kies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.32

:\Documents and Settings\Hugh.MONTY\Application Data\Mozilla\Firefox\Profiles\amv86l28.default\coo kies.txt -> TrackingCookie.Targetnet : Cleaned with backup
:mozilla.33

:\Documents and Settings\Hugh.MONTY\Application Data\Mozilla\Firefox\Profiles\amv86l28.default\coo kies.txt -> TrackingCookie.Targetnet : Cleaned with backup
D:\Documents and Settings\Hugh.MONTY\Cookies\hugh@com[1].txt -> TrackingCookie.Com : Cleaned with backup
D:\Documents and Settings\Hugh.MONTY\Cookies\hugh@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.66

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.67

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.68

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.69

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.70

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.71

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.72

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.73

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.74

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.98

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.99

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.114

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Estat : Cleaned with backup
:mozilla.118

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.120

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.122

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Hotlog : Cleaned with backup
:mozilla.123

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Yadro : Cleaned with backup
:mozilla.124

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Yadro : Cleaned with backup
:mozilla.131

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Trafic : Cleaned with backup
:mozilla.143

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.144

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.145

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.154

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.155

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.221

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.222

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.226

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.228

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.229

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.233

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.234

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.240

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.241

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.242

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.243

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.244

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.248

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.251

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.252

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.253

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.254

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.257

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.258

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
:mozilla.265

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.274

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.293

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.294

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.295

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.296

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Hitslink : Cleaned with backup
:mozilla.298

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.299

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.300

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.301

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.311

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.312

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.314

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Bfast : Cleaned with backup
:mozilla.317

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.320

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.322

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.326

:\Documents and Settings\Karl\Application Data\Mozilla\Firefox\Profiles\4bseezsi.default\coo kies.txt -> TrackingCookie.Liveperson : Cleaned with backup
D:\Documents and Settings\Karl\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\arc hive.jar-487b52a0-4e19406e.zip/BlackBox.class -> Dropper.Beyond.g : Cleaned with backup
D:\Documents and Settings\Karl\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\arc hive.jar-487b52a0-4e19406e.zip/Beyond.class -> Dropper.Beyond.g : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@att.com[1].txt -> TrackingCookie.Com : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@bfast[2].txt -> TrackingCookie.Bfast : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@com[1].txt -> TrackingCookie.Com : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@download.com[1].txt -> TrackingCookie.Com : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@ehg-acdsystems.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@ehg-adversitement.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@ehg-bskyb.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@ehg-dig.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@ehg-guardian.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@estat[1].txt -> TrackingCookie.Estat : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@hg1.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@image.masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@phg.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned with backup
D:\Documents and Settings\Karl\Cookies\karl@webstat[1].txt -> TrackingCookie.Web-stat : Cleaned with backup
D:\Documents and Settings\Karl\Local Settings\Temp\__unin__.exe -> Adware.Altnet : Cleaned with backup
D:\Documents and Settings\Karl\Local Settings\Temporary Internet Files\Content.IE5\7YCJFTGD\install[1].htm -> Not-A-Virus.Exploit.HTML.CodeBaseExec : Cleaned with backup
D:\Files from Old PC\New PC - First Install\S-ATA Data\Documents and Settings\Karl\Cookies\karl@com[1].txt -> TrackingCookie.Com : Cleaned with backup
D:\Files from Old PC\New PC - First Install\S-ATA Data\Documents and Settings\Karl\Cookies\karl@hypertracker[2].txt -> TrackingCookie.Hypertracker : Cleaned with backup
D:\Files from Old PC\New PC - First Install\S-ATA Data\Documents and Settings\Karl\Local Settings\Temp\__unin__.exe -> Adware.Altnet : Cleaned with backup
D:\Temp\Documents and Settings\Documents and Settings\Helen.MONTY\Cookies\helen@112.2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
D:\Temp\Documents and Settings\Documents and Settings\Helen.MONTY\Cookies\helen@hypertracker[2].txt -> TrackingCookie.Hypertracker : Cleaned with backup
D:\Temp\Documents and Settings\Documents and Settings\Helen.MONTY\Cookies\helen@webstat[2].txt -> TrackingCookie.Web-stat : Cleaned with backup
D:\Temp\Documents and Settings\Documents and Settings\Henry\Cookies\henry@com[1].txt -> TrackingCookie.Com : Cleaned with backup
D:\Temp\Documents and Settings\Documents and Settings\Henry\Cookies\henry@ilead.itrack[1].txt -> TrackingCookie.Itrack : Cleaned with backup
D:\Temp\Documents and Settings\Documents and Settings\Karl\Cookies\karl@com[1].txt -> TrackingCookie.Com : Cleaned with backup
D:\Temp\Documents and Settings\Helen.MONTY\Cookies\helen@112.2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
D:\Temp\Documents and Settings\Helen.MONTY\Cookies\helen@hypertracker[2].txt -> TrackingCookie.Hypertracker : Cleaned with backup
D:\Temp\Documents and Settings\Helen.MONTY\Cookies\helen@webstat[2].txt -> TrackingCookie.Web-stat : Cleaned with backup
D:\Temp\Documents and Settings\Henry\Cookies\henry@com[1].txt -> TrackingCookie.Com : Cleaned with backup
D:\Temp\Documents and Settings\Henry\Cookies\henry@ilead.itrack[1].txt -> TrackingCookie.Itrack : Cleaned with backup
D:\Temp\Documents and Settings\Karl\Cookies\karl@com[1].txt -> TrackingCookie.Com : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Colin.MONTY/Cookies/colin@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Colin.MONTY/Cookies/colin@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Colin.MONTY/Cookies/colin@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Helen.MONTY/Cookies/helen@112.2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Helen.MONTY/Cookies/helen@2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Helen.MONTY/Cookies/helen@adviva[2].txt -> TrackingCookie.Adviva : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Helen.MONTY/Cookies/helen@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Helen.MONTY/Cookies/helen@commission-junction[1].txt -> TrackingCookie.Commission-junction : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Helen.MONTY/Cookies/helen@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Helen.MONTY/Cookies/helen@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Helen.MONTY/Cookies/helen@hypertracker[2].txt -> TrackingCookie.Hypertracker : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Helen.MONTY/Cookies/helen@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Helen.MONTY/Cookies/helen@overture[2].txt -> TrackingCookie.Overture : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Helen.MONTY/Cookies/helen@qksrv[2].txt -> TrackingCookie.Qksrv : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Helen.MONTY/Cookies/helen@webstat[2].txt -> TrackingCookie.Web-stat : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@advertising[1].txt -> TrackingCookie.Advertising : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@as1.falkag[2].txt -> TrackingCookie.Falkag : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@bfast[1].txt -> TrackingCookie.Bfast : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@bilbo.counted[2].txt -> TrackingCookie.Counted : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@commission-junction[1].txt -> TrackingCookie.Commission-junction : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@com[1].txt -> TrackingCookie.Com : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@data.coremetrics[2].txt -> TrackingCookie.Coremetrics : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@hg1.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@ilead.itrack[1].txt -> TrackingCookie.Itrack : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@linksynergy[1].txt -> TrackingCookie.Linksynergy : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@overture[1].txt -> TrackingCookie.Overture : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@phg.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@pro-market[2].txt -> TrackingCookie.Pro-market : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@qksrv[1].txt -> TrackingCookie.Qksrv : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@servedby.advertising[1].txt -> TrackingCookie.Advertising : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@tracking.thunderdownloads[2].txt -> TrackingCookie.Thunderdownloads : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@trafficmp[1].txt -> TrackingCookie.Trafficmp : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@webpdp.gator[1].txt -> TrackingCookie.Gator : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@xxxtoolbar[1].txt -> TrackingCookie.Xxxtoolbar : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Henry/Cookies/henry@zedo[1].txt -> TrackingCookie.Zedo : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@adviva[2].txt -> TrackingCookie.Adviva : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@as1.falkag[1].txt -> TrackingCookie.Falkag : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@bfast[1].txt -> TrackingCookie.Bfast : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@centrport[1].txt -> TrackingCookie.Centrport : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@com[1].txt -> TrackingCookie.Com : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@ehg-register.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@ehg.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@qksrv[1].txt -> TrackingCookie.Qksrv : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@tracking.thunderdownloads[2].txt -> TrackingCookie.Thunderdownloads : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned with backup
D:\Temp\Documents and Settings.zip/Documents and Settings/Karl/Cookies/karl@zedo[2].txt -> TrackingCookie.Zedo : Cleaned with backup

::Report End

************************************************** ********************
************************************************** ********************

I also ran SpySweeper and gor the following log:

************************************************** ********************
************************************************** ********************

********
19:19: | Start of Session, 16 June 2006 |
19:19: Spy Sweeper started
19:19: Sweep initiated using definitions version 556
19:19: Starting Memory Sweep
19:22: Memory Sweep Complete, Elapsed Time: 00:02:22
19:22: Starting Registry Sweep
19:22: Found Adware: cydoor
19:22: HKU\WRSS_Profile_S-1-5-21-343818398-73586283-682003330-1006\software\cydoor\ (25 subtraces) (ID = 639126)
19:22: Registry Sweep Complete, Elapsed Time:00:00:30
19:22: Starting Cookie Sweep
19:22: Found Spy Cookie: 2o7.net cookie
19:22: hugh@2o7[2].txt (ID = 1957)
19:22: Found Spy Cookie: yieldmanager cookie
19:22: hugh@ad.yieldmanager[1].txt (ID = 3751)
19:22: Found Spy Cookie: adrevolver cookie
19:22: hugh@adrevolver[2].txt (ID = 2088)
19:22: hugh@adrevolver[3].txt (ID = 2088)
19:22: Found Spy Cookie: adtech cookie
19:22: hugh@adtech[2].txt (ID = 2155)
19:22: Found Spy Cookie: apmebf cookie
19:22: hugh@apmebf[2].txt (ID = 2229)
19:22: Found Spy Cookie: hitslink cookie
19:22: hugh@counter2.hitslink[2].txt (ID = 2790)
19:22: Found Spy Cookie: overture cookie
19:22: hugh@data2.perf.overture[1].txt (ID = 3106)
19:22: Found Spy Cookie: mywebsearch cookie
19:22: hugh@mywebsearch[2].txt (ID = 3051)
19:22: hugh@perf.overture[1].txt (ID = 3106)
19:22: Found Spy Cookie: qksrv cookie
19:22: hugh@qksrv[2].txt (ID = 3213)
19:22: Found Spy Cookie: tribalfusion cookie
19:22: hugh@tribalfusion[2].txt (ID = 3589)
19:22: Found Spy Cookie: primaryads cookie
19:22: colin@1.primaryads[1].txt (ID = 3190)
19:22: Found Spy Cookie: 64.62.232 cookie
19:22: colin@64.62.232[1].txt (ID = 1987)
19:22: Found Spy Cookie: adprofile cookie
19:22: colin@adprofile[1].txt (ID = 2084)
19:22: Found Spy Cookie: gorillanation cookie
19:22: colin@ads.gorillanation[2].txt (ID = 2744)
19:22: Found Spy Cookie: falkag cookie
19:22: colin@as1.falkag[2].txt (ID = 2650)
19:22: Found Spy Cookie: did-it cookie
19:22: colin@did-it[2].txt (ID = 2523)
19:22: Found Spy Cookie: go.com cookie
19:22: colin@disney.go[1].txt (ID = 2729)
19:22: Found Spy Cookie: fe.lea.lycos.com cookie
19:22: colin@fe.lea.lycos[1].txt (ID = 2660)
19:22: colin@go[2].txt (ID = 2728)
19:22: Found Spy Cookie: ugo cookie
19:22: colin@mediamgr.ugo[2].txt (ID = 3609)
19:22: Found Spy Cookie: optigamer.com cookie
19:22: colin@optigamer[2].txt (ID = 3099)
19:22: Found Spy Cookie: mircx cookie
19:22: colin@pop.mircx[2].txt (ID = 2998)
19:22: Found Spy Cookie: servlet cookie
19:22: colin@servlet[2].txt (ID = 3345)
19:22: Found Spy Cookie: stats.klsoft.com cookie
19:22: colin@stats.klsoft[1].txt (ID = 3451)
19:22: Found Spy Cookie: toplist cookie
19:22: colin@toplist[1].txt (ID = 3557)
19:22: Found Spy Cookie: xzoomy cookie
19:22: colin@www.xzoomy[1].txt (ID = 3742)
19:22: Found Spy Cookie: yadro cookie
19:22: colin@yadro[2].txt (ID = 3743)
19:22: Found Spy Cookie: sandboxer cookie
19:22: karl@0[2].txt (ID = 3282)
19:22: Found Spy Cookie: 247realmedia cookie
19:22: karl@247realmedia[1].txt (ID = 1953)
19:22: karl@2o7[2].txt (ID = 1957)
19:22: Found Spy Cookie: 3 cookie
19:22: karl@3[2].txt (ID = 1959)
19:22: karl@abcnews.go[1].txt (ID = 2729)
19:22: Found Spy Cookie: about cookie
19:22: karl@about[2].txt (ID = 2037)
19:22: Found Spy Cookie: gamespy cookie
19:22: karl@adcontent.gamespy[1].txt (ID = 2719)
19:22: Found Spy Cookie: specificclick.com cookie
19:22: karl@adopt.specificclick[1].txt (ID = 3400)
19:22: karl@adrevolver[2].txt (ID = 2088)
19:22: Found Spy Cookie: adrevservice cookie
19:22: karl@adrevservice[1].txt (ID = 2091)
19:22: Found Spy Cookie: belointeractive cookie
19:22: karl@ads.belointeractive[1].txt (ID = 2295)
19:22: karl@ads.gorillanation[1].txt (ID = 2744)
19:22: Found Spy Cookie: pointroll cookie
19:22: karl@ads.pointroll[1].txt (ID = 3148)
19:22: Found Spy Cookie: bpath cookie
19:22: karl@ads13.bpath[2].txt (ID = 2321)
19:22: karl@adtech[2].txt (ID = 2155)
19:22: Found Spy Cookie: advertising cookie
19:22: karl@advertising[1].txt (ID = 2175)
19:22: karl@as-us.falkag[1].txt (ID = 2650)
19:22: karl@as1.falkag[1].txt (ID = 2650)
19:22: Found Spy Cookie: atlas dmt cookie
19:22: karl@atdmt[2].txt (ID = 2253)
19:22: Found Spy Cookie: atwola cookie
19:22: karl@atwola[1].txt (ID = 2255)
19:22: Found Spy Cookie: a cookie
19:22: karl@a[1].txt (ID = 2027)
19:22: Found Spy Cookie: banner cookie
19:22: karl@banner[1].txt (ID = 2276)
19:22: Found Spy Cookie: bluestreak cookie
19:22: karl@bluestreak[2].txt (ID = 2314)
19:22: Found Spy Cookie: bravenet cookie
19:22: karl@bravenet[2].txt (ID = 2322)
19:22: Found Spy Cookie: burstnet cookie
19:22: karl@burstnet[1].txt (ID = 2336)
19:22: Found Spy Cookie: zedo cookie
19:22: karl@c2.zedo[2].txt (ID = 3763)
19:22: Found Spy Cookie: gostats cookie
19:22: karl@c3.gostats[2].txt (ID = 2748)
19:22: Found Spy Cookie: casalemedia cookie
19:22: karl@casalemedia[1].txt (ID = 2354)
19:22: Found Spy Cookie: ccbill cookie
19:22: karl@ccbill[1].txt (ID = 2369)
19:22: karl@chinesefood.about[2].txt (ID = 2038)
19:22: karl@classiclit.about[1].txt (ID = 2038)
19:22: Found Spy Cookie: tickle cookie
19:22: karl@cookie.tickle[1].txt (ID = 3530)
19:22: Found Spy Cookie: counter cookie
19:22: karl@counter[2].txt (ID = 2477)
19:22: Found Spy Cookie: clickzs cookie
19:22: karl@cz6.clickzs[2].txt (ID = 2413)
19:22: Found Spy Cookie: webtrendslive cookie
19:22: karl@dcsgcxwngpifwznfzlmv83o6w_5w4m[1].txt (ID = 3674)
19:22: Found Spy Cookie: belnk cookie
19:22: karl@dist.belnk[2].txt (ID = 2293)
19:22: Found Spy Cookie: tripod cookie
19:22: karl@ecalame.tripod[1].txt (ID = 3592)
19:22: Found Spy Cookie: exitexchange cookie
19:22: karl@exitexchange[1].txt (ID = 2633)
19:22: Found Spy Cookie: fastclick cookie
19:22: karl@fastclick[1].txt (ID = 2651)
19:22: karl@fe.lea.lycos[1].txt (ID = 2660)
19:22: karl@fe.lea.lycos[3].txt (ID = 2660)
19:23: Found Spy Cookie: firstchoice cookie
19:23: karl@firstchoice[1].txt (ID = 2678)
19:23: Found Spy Cookie: comclick cookie
19:23: karl@fl01.ct2.comclick[2].txt (ID = 2450)
19:23: Found Spy Cookie: wegcash cookie
19:23: karl@free.wegcash[2].txt (ID = 3682)
19:23: karl@gamespy[1].txt (ID = 2719)
19:23: Found Spy Cookie: gator cookie
19:23: karl@gator[1].txt (ID = 2722)
19:23: karl@gostats[2].txt (ID = 2747)
19:23: karl@go[2].txt (ID = 2728)
19:23: Found Spy Cookie: l2m.net cookie
19:23: karl@l2m[1].txt (ID = 2913)
19:23: Found Spy Cookie: linksynergy cookie
19:23: karl@linksynergy[1].txt (ID = 2926)
19:23: Found Spy Cookie: maxserving cookie
19:23: karl@maxserving[1].txt (ID = 2966)
19:23: karl@mediamgr.ugo[2].txt (ID = 3609)
19:23: karl@microsofteup.112.2o7[1].txt (ID = 1958)
19:23: Found Spy Cookie: nextag cookie
19:23: karl@nextag[2].txt (ID = 5014)
19:23: Found Spy Cookie: netratingsselect cookie
19:23: karl@nnselect[2].txt (ID = 3065)
19:23: Found Spy Cookie: outster cookie
19:23: karl@outster[2].txt (ID = 3103)
19:23: karl@overture[1].txt (ID = 3105)
19:23: karl@programs.wegcash[2].txt (ID = 3682)
19:23: Found Spy Cookie: pub cookie
19:23: karl@pub[2].txt (ID = 3205)
19:23: karl@puzzles.about[2].txt (ID = 2038)
19:23: Found Spy Cookie: questionmarket cookie
19:23: karl@questionmarket[1].txt (ID = 3217)
19:23: Found Spy Cookie: rb4.ampland cookie
19:23: karl@rb4.ampland[1].txt (ID = 3229)
19:23: Found Spy Cookie: rc cookie
19:23: karl@rc[1].txt (ID = 3231)
19:23: Found Spy Cookie: realmedia cookie
19:23: karl@realmedia[1].txt (ID = 3235)
19:23: Found Spy Cookie: rednova cookie
19:23: karl@rednova[2].txt (ID = 3245)
19:23: karl@rsi.abcnews.go[1].txt (ID = 2729)
19:23: Found Spy Cookie: seeq cookie
19:23: karl@seeq[1].txt (ID = 3331)
19:23: Found Spy Cookie: servedby advertising cookie
19:23: karl@servedby.advertising[1].txt (ID = 3335)
19:23: Found Spy Cookie: server.iad.liveperson cookie
19:23: karl@server.iad.liveperson[1].txt (ID = 3341)
19:23: Found Spy Cookie: serving-sys cookie
19:23: karl@serving-sys[1].txt (ID = 3343)
19:23: karl@servlet[1].txt (ID = 3345)
19:23: karl@southernfood.about[1].txt (ID = 2038)
19:23: karl@specificclick[1].txt (ID = 3399)
19:23: Found Spy Cookie: spinbox cookie
19:23: karl@spinbox[1].txt (ID = 3405)
19:23: Found Spy Cookie: spylog cookie
19:23: karl@spylog[2].txt (ID = 3415)
19:23: Found Spy Cookie: dealtime cookie
19:23: karl@stat.dealtime[1].txt (ID = 2506)
19:23: Found Spy Cookie: onestat.com cookie
19:23: karl@stat.onestat[2].txt (ID = 3098)
19:23: Found Spy Cookie: statcounter cookie
19:23: karl@statcounter[1].txt (ID = 3447)
19:23: karl@stats.klsoft[1].txt (ID = 3451)
19:23: Found Spy Cookie: targetnet cookie
19:23: karl@targetnet[2].txt (ID = 3489)
19:23: karl@tickle[2].txt (ID = 3529)
19:23: karl@toplist[1].txt (ID = 3557)
19:23: karl@toplist[2].txt (ID = 3557)
19:23: Found Spy Cookie: tradedoubler cookie
19:23: karl@tradedoubler[2].txt (ID = 3575)
19:23: Found Spy Cookie: trafficmp cookie
19:23: karl@trafficmp[1].txt (ID = 3581)
19:23: Found Spy Cookie: trb.com cookie
19:23: karl@trb[1].txt (ID = 3587)
19:23: karl@tribalfusion[1].txt (ID = 3589)
19:23: Found Spy Cookie: coremetrics cookie
19:23: karl@twci.coremetrics[1].txt (ID = 2472)
19:23: Found Spy Cookie: versiontracker cookie
19:23: karl@versiontracker[1].txt (ID = 3636)
19:23: Found Spy Cookie: webads cookie
19:23: karl@webads[2].txt (ID = 3650)
19:23: Found Spy Cookie: weborama cookie
19:23: karl@weborama[2].txt (ID = 3658)
19:23: Found Spy Cookie: webpower cookie
19:23: karl@webpower[1].txt (ID = 3660)
19:23: Found Spy Cookie: burstbeacon cookie
19:23: karl@www.burstbeacon[2].txt (ID = 2335)
19:23: Found Spy Cookie: starpulse cookie
19:23: karl@www.starpulse[1].txt (ID = 3440)
19:23: Found Spy Cookie: sweet4all cookie
19:23: karl@www.sweet4all[1].txt (ID = 3482)
19:23: Found Spy Cookie: web-stat cookie
19:23: karl@www.web-stat[2].txt (ID = 3649)
19:23: Found Spy Cookie: xiti cookie
19:23: karl@xiti[1].txt (ID = 3717)
19:23: karl@yadro[1].txt (ID = 3743)
19:23: Found Spy Cookie: adserver cookie
19:23: karl@z1.adserver[1].txt (ID = 2142)
19:23: karl@zedo[1].txt (ID = 3762)
19:23: helen@112.2o7[2].txt (ID = 1958)
19:23: helen@2o7[1].txt (ID = 1957)
19:23: helen@about[2].txt (ID = 2037)
19:23: helen@advertising[2].txt (ID = 2175)
19:23: Found Spy Cookie: adviva cookie
19:23: helen@adviva[1].txt (ID = 2177)
19:23: Found Spy Cookie: ask cookie
19:23: helen@ask[2].txt (ID = 2245)
19:23: helen@atdmt[2].txt (ID = 2253)
19:23: helen@atwola[2].txt (ID = 2255)
19:23: helen@a[1].txt (ID = 2027)
19:23: Found Spy Cookie: banners cookie
19:23: helen@banners[1].txt (ID = 2282)
19:23: Found Spy Cookie: bs.serving-sys cookie
19:23: helen@bs.serving-sys[1].txt (ID = 2330)
19:23: helen@burstnet[1].txt (ID = 2336)
19:23: helen@casalemedia[2].txt (ID = 2354)
19:23: Found Spy Cookie: centrport net cookie
19:23: helen@centrport[2].txt (ID = 2374)
19:23: Found Spy Cookie: 360i cookie
19:23: helen@ct.360i[2].txt (ID = 1962)
19:23: Found Spy Cookie: touchclarity cookie
19:23: helen@easyjet.touchclarity[1].txt (ID = 3566)
19:23: Found Spy Cookie: adbureau cookie
19:23: helen@etype.adbureau[1].txt (ID = 2060)
19:23: helen@experts.about[1].txt (ID = 2038)
19:23: helen@fastclick[1].txt (ID = 2651)
19:23: Found Spy Cookie: go2net.com cookie
19:23: helen@go2net[1].txt (ID = 2730)
19:23: Found Spy Cookie: hypertracker.com cookie
19:23: helen@hypertracker[2].txt (ID = 2817)
19:23: helen@italian.about[1].txt (ID = 2038)
19:23: Found Spy Cookie: kount cookie
19:23: helen@kount[1].txt (ID = 2911)
19:23: helen@maxserving[1].txt (ID = 2966)
19:23: helen@nextag[1].txt (ID = 5014)
19:23: helen@overture[1].txt (ID = 3105)
19:23: helen@pub[1].txt (ID = 3205)
19:23: helen@questionmarket[1].txt (ID = 3217)
19:23: helen@sel.as-eu.falkag[1].txt (ID = 2650)
19:23: helen@servedby.advertising[2].txt (ID = 3335)
19:23: helen@serving-sys[1].txt (ID = 3343)
19:23: helen@stat.dealtime[2].txt (ID = 2506)
19:23: helen@statcounter[1].txt (ID = 3447)
19:23: helen@statse.webtrendslive[2].txt (ID = 3667)
19:23: helen@tradedoubler[2].txt (ID = 3575)
19:23: helen@tribalfusion[2].txt (ID = 3589)
19:23: helen@web.ask[1].txt (ID = 2246)
19:23: helen@womenshealth.about[2].txt (ID = 2038)
19:23: helen@www.burstbeacon[1].txt (ID = 2335)
19:23: Found Spy Cookie: stlyrics cookie
19:23: helen@www.stlyrics[2].txt (ID = 3462)
19:23: helen@www.web-stat[2].txt (ID = 3649)
19:23: helen@xiti[1].txt (ID = 3717)
19:23: helen@z1.adserver[1].txt (ID = 2142)
19:23: helen@zedo[2].txt (ID = 3762)
19:23: henry@0[2].txt (ID = 3282)
19:23: henry@112.2o7[1].txt (ID = 1958)
19:23: henry@247realmedia[1].txt (ID = 1953)
19:23: henry@2o7[1].txt (ID = 1957)
19:23: henry@64.62.232[2].txt (ID = 1987)
19:23: Found Spy Cookie: 7search cookie
19:23: henry@7search[2].txt (ID = 2011)
19:23: henry@about[1].txt (ID = 2037)
19:23: Found Spy Cookie: ad-rotator cookie
19:23: henry@ad-rotator[2].txt (ID = 2051)
19:23: Found Spy Cookie: adlegend cookie
19:23: henry@adlegend[1].txt (ID = 2074)
19:23: henry@adopt.specificclick[1].txt (ID = 3400)
19:23: Found Spy Cookie: addynamix cookie
19:23: henry@ads.addynamix[1].txt (ID = 2062)
19:23: Found Spy Cookie: ads.adsag cookie
19:23: henry@ads.adsag[2].txt (ID = 2108)
19:23: henry@ads.pointroll[2].txt (ID = 3148)
19:23: henry@adtech[2].txt (ID = 2155)
19:23: henry@advertising[2].txt (ID = 2175)
19:23: henry@adviva[1].txt (ID = 2177)
19:23: henry@apmebf[2].txt (ID = 2229)
19:23: henry@as-us.falkag[1].txt (ID = 2650)
19:23: henry@as1.falkag[1].txt (ID = 2650)
19:23: henry@atdmt[2].txt (ID = 2253)
19:23: henry@atwola[2].txt (ID = 2255)
19:23: henry@a[1].txt (ID = 2027)
19:23: henry@banners[1].txt (ID = 2282)
19:23: henry@bbq.about[1].txt (ID = 2038)
19:23: henry@belnk[1].txt (ID = 2292)
19:23: Found Spy Cookie: bizrate cookie
19:23: henry@bizrate[2].txt (ID = 2308)
19:23: henry@bluestreak[1].txt (ID = 2314)
19:23: henry@bravenet[2].txt (ID = 2322)
19:23: henry@bs.serving-sys[2].txt (ID = 2330)
19:23: henry@burstnet[2].txt (ID = 2336)
19:23: Found Spy Cookie: enhance cookie
19:23: henry@c.enhance[1].txt (ID = 2614)
19:23: henry@casalemedia[2].txt (ID = 2354)
19:23: Found Spy Cookie: cd freaks cookie
19:23: henry@cdfreaks[2].txt (ID = 2370)
19:23: henry@centrport[1].txt (ID = 2374)
19:23: henry@****tails.about[1].txt (ID = 2038)
19:23: henry@compsimgames.about[2].txt (ID = 2038)
19:23: henry@counter.hitslink[1].txt (ID = 2790)
19:23: henry@counter2.hitslink[2].txt (ID = 2790)
19:23: henry@creview.adbureau[2].txt (ID = 2060)
19:23: henry@ct.360i[2].txt (ID = 1962)
19:23: henry@dcsx8czs1erp17368wkcsn8pc_9z2q[1].txt (ID = 3678)
19:23: henry@dealtime[1].txt (ID = 2505)
19:23: henry@dist.belnk[2].txt (ID = 2293)
19:23: henry@easyjet.touchclarity[1].txt (ID = 3566)
19:23: henry@etype.adbureau[1].txt (ID = 2060)
19:23: henry@fastclick[2].txt (ID = 2651)
19:23: henry@gamespy[1].txt (ID = 2719)
19:23: henry@gator[1].txt (ID = 2722)
19:23: Found Spy Cookie: howstuffworks cookie
19:23: henry@howstuffworks[1].txt (ID = 2805)
19:23: henry@humor.about[2].txt (ID = 2038)
19:23: henry@italianfood.about[1].txt (ID = 2038)
19:23: henry@kount[2].txt (ID = 2911)
19:23: henry@landscaping.about[2].txt (ID = 2038)
19:23: henry@maxserving[2].txt (ID = 2966)
19:23: henry@mediamgr.ugo[2].txt (ID = 3609)
19:23: Found Spy Cookie: mp3s hits cookie
19:23: henry@mp3****s[1].txt (ID = 3018)
19:23: henry@nextag[2].txt (ID = 5014)
19:23: henry@overture[2].txt (ID = 3105)
19:23: Found Spy Cookie: pricegrabber cookie
19:23: henry@pricegrabber[1].txt (ID = 3185)
19:23: Found Spy Cookie: pro-market cookie
19:23: henry@pro-market[1].txt (ID = 3197)
19:23: henry@qksrv[2].txt (ID = 3213)
19:23: henry@questionmarket[2].txt (ID = 3217)
19:23: henry@realmedia[2].txt (ID = 3235)
19:23: Found Spy Cookie: rightmedia cookie
19:23: henry@rightmedia[1].txt (ID = 3259)
19:23: henry@sel.as-us.falkag[2].txt (ID = 2650)
19:23: henry@servedby.advertising[1].txt (ID = 3335)
19:23: henry@server.iad.liveperson[1].txt (ID = 3341)
19:23: henry@server3.web-stat[2].txt (ID = 3649)
19:23: henry@serving-sys[2].txt (ID = 3343)
19:23: henry@servlet[1].txt (ID = 3345)
19:23: henry@sleepdisorders.about[1].txt (ID = 2038)
19:23: henry@spylog[1].txt (ID = 3415)
19:23: Found Spy Cookie: spywarestormer cookie
19:23: henry@spywarestormer[2].txt (ID = 3417)
19:23: henry@stat.dealtime[2].txt (ID = 2506)
19:23: henry@stat.onestat[2].txt (ID = 3098)
19:23: henry@statcounter[1].txt (ID = 3447)
19:23: henry@statse.webtrendslive[1].txt (ID = 3667)
19:23: henry@targetnet[1].txt (ID = 3489)
19:23: henry@toplist[1].txt (ID = 3557)
19:23: Found Spy Cookie: tracking cookie
19:23: henry@tracking[1].txt (ID = 3571)
19:23: henry@tradedoubler[1].txt (ID = 3575)
19:23: henry@trafficmp[2].txt (ID = 3581)
19:23: henry@tribalfusion[2].txt (ID = 3589)
19:23: henry@tripod[1].txt (ID = 3591)
19:23: henry@versiontracker[2].txt (ID = 3636)
19:23: henry@weborama[1].txt (ID = 3658)
19:23: Found Spy Cookie: 123count cookie
19:23: henry@www.123count[2].txt (ID = 1928)
19:23: henry@www.burstbeacon[1].txt (ID = 2335)
19:23: henry@www.web-stat[2].txt (ID = 3649)
19:23: henry@xiti[2].txt (ID = 3717)
19:23: henry@z1.adserver[2].txt (ID = 2142)
19:23: henry@zedo[2].txt (ID = 3762)
19:23: Cookie Sweep Complete, Elapsed Time: 00:00:29
19:23: Starting File Sweep
19:37: Found Adware: altnet
19:37: d:\documents and settings\henry\local settings\temp\admcache (ID = -2147481437)
19:41: peer points manager.lnk (ID = 49852)
19:43: peer points manager.lnk (ID = 49852)
19:50: Found Adware: gain-supported software
19:50: bundle.inf (ID = 61287)
20:15: Warning: Unhandled Archive Type
20:15: Warning: Unhandled Archive Type
20:37: Found Adware: java byteverify
20:37: ar3.jar-4271db64-7de4405a.zip (ID = 64824)
20:38: Warning: Unhandled Archive Type
20:38: Warning: Unhandled Archive Type
20:38: Warning: Unhandled Archive Type
20:38: Warning: Unhandled Archive Type
20:38: Warning: Unhandled Archive Type
20:38: File Sweep Complete, Elapsed Time: 01:15:32
20:38: Full Sweep has completed. Elapsed time 01:18:56
20:38: Traces Found: 296
20:45: Removal process initiated
20:45: Quarantining All Traces: altnet
20:45: Quarantining All Traces: cydoor
20:45: Quarantining All Traces: gain-supported software
20:45: Quarantining All Traces: java byteverify
20:45: Quarantining All Traces: 123count cookie
20:45: Quarantining All Traces: 247realmedia cookie
20:45: Quarantining All Traces: 2o7.net cookie
20:45: Quarantining All Traces: 3 cookie
20:45: Quarantining All Traces: 360i cookie
20:45: Quarantining All Traces: 64.62.232 cookie
20:45: Quarantining All Traces: 7search cookie
20:45: Quarantining All Traces: a cookie
20:45: Quarantining All Traces: about cookie
20:45: Quarantining All Traces: adbureau cookie
20:45: Quarantining All Traces: addynamix cookie
20:45: Quarantining All Traces: adlegend cookie
20:45: Quarantining All Traces: adprofile cookie
20:45: Quarantining All Traces: adrevolver cookie
20:45: Quarantining All Traces: adrevservice cookie
20:45: Quarantining All Traces: ad-rotator cookie
20:45: Quarantining All Traces: ads.adsag cookie
20:45: Quarantining All Traces: adserver cookie
20:45: Quarantining All Traces: adtech cookie
20:45: Quarantining All Traces: advertising cookie
20:45: Quarantining All Traces: adviva cookie
20:45: Quarantining All Traces: apmebf cookie
20:45: Quarantining All Traces: ask cookie
20:45: Quarantining All Traces: atlas dmt cookie
20:45: Quarantining All Traces: atwola cookie
20:45: Quarantining All Traces: banner cookie
20:45: Quarantining All Traces: banners cookie
20:45: Quarantining All Traces: belnk cookie
20:45: Quarantining All Traces: belointeractive cookie
20:45: Quarantining All Traces: bizrate cookie
20:45: Quarantining All Traces: bluestreak cookie
20:45: Quarantining All Traces: bpath cookie
20:45: Quarantining All Traces: bravenet cookie
20:45: Quarantining All Traces: bs.serving-sys cookie
20:45: Quarantining All Traces: burstbeacon cookie
20:45: Quarantining All Traces: burstnet cookie
20:45: Quarantining All Traces: casalemedia cookie
20:45: Quarantining All Traces: ccbill cookie
20:45: Quarantining All Traces: cd freaks cookie
20:45: Quarantining All Traces: centrport net cookie
20:45: Quarantining All Traces: clickzs cookie
20:45: Quarantining All Traces: comclick cookie
20:45: Quarantining All Traces: coremetrics cookie
20:45: Quarantining All Traces: counter cookie
20:45: Quarantining All Traces: dealtime cookie
20:45: Quarantining All Traces: did-it cookie
20:45: Quarantining All Traces: enhance cookie
20:45: Quarantining All Traces: exitexchange cookie
20:45: Quarantining All Traces: falkag cookie
20:45: Quarantining All Traces: fastclick cookie
20:45: Quarantining All Traces: fe.lea.lycos.com cookie
20:45: Quarantining All Traces: firstchoice cookie
20:45: Quarantining All Traces: gamespy cookie
20:45: Quarantining All Traces: gator cookie
20:45: Quarantining All Traces: go.com cookie
20:45: Quarantining All Traces: go2net.com cookie
20:45: Quarantining All Traces: gorillanation cookie
20:45: Quarantining All Traces: gostats cookie
20:45: Quarantining All Traces: hitslink cookie
20:45: Quarantining All Traces: howstuffworks cookie
20:45: Quarantining All Traces: hypertracker.com cookie
20:45: Quarantining All Traces: kount cookie
20:45: Quarantining All Traces: l2m.net cookie
20:45: Quarantining All Traces: linksynergy cookie
20:45: Quarantining All Traces: maxserving cookie
20:45: Quarantining All Traces: mircx cookie
20:45: Quarantining All Traces: mp3s hits cookie
20:45: Quarantining All Traces: mywebsearch cookie
20:45: Quarantining All Traces: netratingsselect cookie
20:45: Quarantining All Traces: nextag cookie
20:45: Quarantining All Traces: onestat.com cookie
20:45: Quarantining All Traces: optigamer.com cookie
20:45: Quarantining All Traces: outster cookie
20:45: Quarantining All Traces: overture cookie
20:45: Quarantining All Traces: pointroll cookie
20:45: Quarantining All Traces: pricegrabber cookie
20:45: Quarantining All Traces: primaryads cookie
20:45: Quarantining All Traces: pro-market cookie
20:45: Quarantining All Traces: pub cookie
20:45: Quarantining All Traces: qksrv cookie
20:45: Quarantining All Traces: questionmarket cookie
20:45: Quarantining All Traces: rb4.ampland cookie
20:45: Quarantining All Traces: rc cookie
20:45: Quarantining All Traces: realmedia cookie
20:45: Quarantining All Traces: rednova cookie
20:45: Quarantining All Traces: rightmedia cookie
20:45: Quarantining All Traces: sandboxer cookie
20:45: Quarantining All Traces: seeq cookie
20:45: Quarantining All Traces: servedby advertising cookie
20:45: Quarantining All Traces: server.iad.liveperson cookie
20:45: Quarantining All Traces: serving-sys cookie
20:45: Quarantining All Traces: servlet cookie
20:45: Quarantining All Traces: specificclick.com cookie
20:45: Quarantining All Traces: spinbox cookie
20:45: Quarantining All Traces: spylog cookie
20:45: Quarantining All Traces: spywarestormer cookie
20:45: Quarantining All Traces: starpulse cookie
20:45: Quarantining All Traces: statcounter cookie
20:45: Quarantining All Traces: stats.klsoft.com cookie
20:45: Quarantining All Traces: stlyrics cookie
20:45: Quarantining All Traces: sweet4all cookie
20:45: Quarantining All Traces: targetnet cookie
20:45: Quarantining All Traces: tickle cookie
20:45: Quarantining All Traces: toplist cookie
20:45: Quarantining All Traces: touchclarity cookie
20:45: Quarantining All Traces: tracking cookie
20:45: Quarantining All Traces: tradedoubler cookie
20:45: Quarantining All Traces: trafficmp cookie
20:45: Quarantining All Traces: trb.com cookie
20:45: Quarantining All Traces: tribalfusion cookie
20:45: Quarantining All Traces: tripod cookie
20:45: Quarantining All Traces: ugo cookie
20:45: Quarantining All Traces: versiontracker cookie
20:45: Quarantining All Traces: webads cookie
20:45: Quarantining All Traces: weborama cookie
20:45: Quarantining All Traces: webpower cookie
20:45: Quarantining All Traces: web-stat cookie
20:45: Quarantining All Traces: webtrendslive cookie
20:45: Quarantining All Traces: wegcash cookie
20:45: Quarantining All Traces: xiti cookie
20:45: Quarantining All Traces: xzoomy cookie
20:45: Quarantining All Traces: yadro cookie
20:45: Quarantining All Traces: yieldmanager cookie
20:45: Quarantining All Traces: zedo cookie
20:46: Removal process completed. Elapsed time 00:00:52
********
19:18: | Start of Session, 16 June 2006 |
19:18: Spy Sweeper started
19:18: Sweep initiated using definitions version 556
19:18: Starting Memory Sweep
19:18: Sweep Canceled
19:18: Memory Sweep Complete, Elapsed Time: 00:00:05
19:18: Traces Found: 0
19:19: | End of Session, 16 June 2006 |
********
19:17: | Start of Session, 16 June 2006 |
19:17: Spy Sweeper started
19:18: There is a problem reaching the server. The cause may be in your connection, or on the server. Please try again later.
19:18: | End of Session, 16 June 2006 |

************************************************** ********************
************************************************** ********************

There is an option in SpySweeper to restore the IE homepage. When I started IE before, nothing would happen, I'd just get a blank page. But after I did this, I got an "Unable to load page" error. But the odd thing is, that when I tried to load any other page, it automatically puts in an extra www and .com eg when I put in http://www.yahoo.com/, the status bar at the bottom of IE would say, http://www.www.yahoo.com.com/

Not sure what other info I can give you, but any help would be grately appreciated.

Thanks,
Hugh.

Neal · #2 (**permalink**) 17-06-2006, 11:20 PM

Welcome to DAL,

Thanks for the info but nothing is showing in your HJT log.

Three things:

Go here BitDefender and run an online scan with BitDefender (you will need to use Internet Explorer for this scan). When the ActiveX Control has loaded, click on "Click here to scan" and grab a coffee.

When BitDefender completes the scan, select the "Detected Problems" tab. Click on "Click here to export scan". Save the file as an HTML to your Desktop. Then click on the saved file and allow it to open with your browser. Go to Edit - Select All then copy/paste that log back here. Post back and let us know what it found (post the log).

And post a new HJT log also..

Then next(do this after BitDefender as it finds only and does not delete anything)

http://www.kaspersky.com/virusscanner

Please do an online scan with Kaspersky WebScanner

Click on Kaspersky Online Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

* The program will launch and then begin downloading the latest definition files:
* Once the files have been downloaded click on NEXT
* Now click on Scan Settings
* In the scan settings make sure that the following are selected:
o Scan using the following Anti-Virus database:
- Extended (if available otherwise Standard)
o Scan Options:
- Scan Archives
- Scan Mail Bases
* Click OK
*Now under select a target to scan:
o Select My Computer
* This program will start and scan your system.
* The scan will take a while so be patient and let it run.
* Once the scan is complete it will display if your system has been infected.
o Now click on the Save as Text button:
* Save the file to your desktop.
* Copy and paste that information in your next post.

Also:

Open Hijackthis.

Click the "Open the Misc Tools" section Button.

Click the "Open Uninstall Manager" Button.

Click the "Save list..." Button.

Save it to your desktop. Copy and paste the contents into your reply.

Humanji · #3 (**permalink**) 18-06-2006, 12:37 PM

Well, I can't run the online scans since the virus has knocked out the net connection. But here is the uninstall list:

3ivx D4 4.5.1 (remove only)
A4 DVD Shrinker
ABBYY FineReader 5.0 Sprint
ABBYY FineReader 6.0
ABBYY FineReader OCR Engine
ABC (remove only)
ACDSee 7.0 PowerPack
AceFTP 3 Freeware
Ad-Aware SE Personal
Adobe Atmosphere Player for Acrobat and Adobe Reader
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Download Manager 1.2 (Remove Only)
Adobe Help Center 1.0
Adobe Illustrator CS2
Adobe Photoshop 7.0
Adobe Photoshop Album 2.0 Starter Edition
Adobe Photoshop CS
Adobe Photoshop CS2
Adobe Reader 7.0.8
Adobe Stock Photos 1.0
Adobe Stock Photos 1.0
Adobe SVG Viewer 3.0
ArcSoft Camera Suite 1.3
ATI - Software Uninstall Utility
ATI Control Panel
ATI Display Driver
Auto Gordian Knot 1.95
AviSynth 2.5
AxCrypt (Remove Only)
Azureus
Battlefield 2(TM)
Calculator Powertoy for Windows XP
Call of Duty(R) 2
Canon Camera Support Core Library
Canon Camera Window for ZoomBrowser EX
Canon Internet Library for ZoomBrowser EX
Canon MovieEdit Task for ZoomBrowser EX
Canon PhotoRecord
Canon RAW Image Task for ZoomBrowser EX
Canon RemoteCapture Task for ZoomBrowser EX
Canon Utilities PhotoStitch 3.1
Canon Utilities ZoomBrowser EX
CloneDVD2
C-Media 3D Audio
Colorful DVD Creator 3.0
Corel Painter Essentials 2
Creative Jukebox Driver
Creative MediaSource
Creative Removable Disk Manager
Creative System Information
Creative Zen Micro
DAE
Delta Force - Black Hawk Down
Delta Force Black Hawk Down Team Sabre
DFBHDPinger v5.0
Doom 3
DVD Decrypter (Remove Only)
DVD Shrink 3.2
Easy Video Joiner 5.21
Easy Video Splitter 1.28
EasyPDF
EAX4 Unified Redist
EPSON Attach To Email
EPSON CardMonitor
EPSON Easy Photo Print
EPSON File Manager
EPSON Photo!4 Ver1.8
EPSON PhotoQuicker3.5
EPSON PhotoStarter3.1
EPSON Printer Software
EPSON Scan Assistant
EPSON Web-To-Page
ESPR240 User's Guide
Ethereal 0.10.2
ewido anti-malware
Far Cry
FileZilla (remove only)
FlashFXP v3
Flickr Uploadr 2.3
FreeGuide 0.8.6
GameSpy Arcade
Google Earth
Google Toolbar for Internet Explorer
HighMAT Extension to Microsoft Windows XP CD Writing Wizard
HijackThis 1.99.1
Hotfix for Windows XP (KB896344)
HP Deskjet 5400 series
HP Extended Capabilities 5.0
HP Image Zone Express
HP Imaging Device Functions 5.0
HP PrecisionScan LTX
HP Software Update
HP Solution Center & Imaging Support Tools 5.0
HTML Slideshow Powertoy for Windows XP
IL-2 Sturmovik
InterActual Player
iTunes
Java 2 Runtime Environment, SE v1.4.2_03
Logitech Harmony Remote Client
Macromedia Shockwave Player
Medal of Honor Pacific Assault(tm)
Media Library Management Wizard
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft .NET Framework 2.0
Microsoft AutoRoute 2005
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Combat Flight Simulator 2
Microsoft Flight Simulator 2004 A Century of Flight
Microsoft Office 2000 Premium
Microsoft RAW Image Thumbnailer and Viewer for Windows XP Version 1.0 (Build 50)
mIRC
Morgan JPEG2000 Plug-in V1
Movie Maker Background Music Files
Movie Maker Sound Effects
Movie Maker Title Images
Mozilla Firefox (1.5.0.3)
MP3 Checker 1.05
MP3PowerEncoder
MSN Gaming Zone
MSN Messenger 6.2
MSN Toolbar
My Web Search (My Fun Cards)
NASA World Wind 1.3
Nero 6 Ultra Edition
NeroVision Express 2
Nikon FotoShare
Nikon Message Center
Nikon Scan
NikonCapture
Norton Ghost
Norton WMI Update
Nostromo Array Programming Software
Online File Folder Synchronization Tool
PC Magazine's 2004 Top 100s as Internet Explorer Favorites
PCI Audio Driver
Personal License Update Wizard for Windows Media Player
PhotoShow Deluxe 3
Picasa 2
PictureProject
Plus! MP3 Audio Converter LE
QuickTime
RealPlayer
Realtek AC'97 Audio
Return to Castle Wolfenstein - Platinum Edition
Sage Line 50 6.0
ScanToWeb
ScanWizard 5
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901190)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Shareaza version 2.1.0.0
SimpleOCR 3.1
Sniper Elite
Soulseek Client 152
Spelling Dictionaries For Adobe Reader Package
Spy Sweeper
Spybot - Search & Destroy 1.4
Tablet
TeamSpeak 2 RC2
TextPad 4.7
Trillian
Tweak UI
ubi.com
Ulead Photo Explorer 8.0 SE Basic
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB900930)
Update for Windows XP (KB910437)
VideoLAN VLC media player 0.8.2
Videora iPod Converter 0.91
VobSub v2.23 (Remove Only)
WinAVI Video Converter 5.8
Windows Defender
Windows Defender Signatures
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Media Bonus Pack for Windows XP
Windows Media Connect
Windows Media Format Runtime
Windows Media Format SDK Hotfix - KB891122
Windows Media Player 10
Windows Media Player Playlist Import to Excel Wizard
Windows Media Player Skin Importer
Windows Media Player Tray Control
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB887797
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Service Pack 2
WinMPG Video Convert 5.6
WinPcap 3.0
WinRAR archiver
Wolfenstein - Enemy Territory
Wolfenstein 3D
XviD MPEG-4 Video Codec
XviD MPEG4 Video Codec (remove only)
YASA DVD to MPEG Converter v3.6 (build 042)

Thanks.

Neal · #4 (**permalink**) 18-06-2006, 09:59 PM

Hi,

1.) Download WinSockFix. (by: Option^Explicit)
2.) UnZip WinsockFix.zip (Pay close attention to where the file is extracted to.)
3.) Run WinsockFix.exe.
4.) Click the Fix button.

Hopefully that will help get your internet connection back

Create a folder such as C:\HJT or C:\Program Files\HJT and move HJT.exe into the newly created folder so we can have avaiable backups in case you fix the wrong thing or I make a mistake. Very important.

Go here to learn how to show hidden files/folders:

http://www.xtra.co.nz/help/0,,4155-1916458,00.html#5

Re-hide after we are done

Go into add/remove program and remove:(IF FOUND)

GameSpy Arcade
My Web Search (My Fun Cards)

Reboot...

Run hijackthis and click on scan button and put checks next to these:

R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL

O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\3.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe

O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolba...arch.jhtml?p=ZU

Nothing open but hijackthis and click fix checked.

Now reboot into safe mode by tapping your F8 key upon restart and safe mode screen appears, select safe mode and press enter.

Navigate to these files or folders using Windows Explorer (OR Start -> Search) and delete (if present):

DELETE FOLDERS

C:\Program Files\MyWebSearch

Reboot normal mode and tell me if you got your connection back

Humanji · #5 (**permalink**) 18-06-2006, 10:54 PM

Well, Winsockfix doesn't help unfortunately. I ran add/remove programs and removed both those programs. My system froze after each was removed. I restarted and ran HJT but none of those lines were there (I'm presuming they were removed when the programs were removed. And finally, the MyWebSearch folder isn't on the system at all.

And to top it all, my internet connection still isn't up.

But...
I did notice something odd. I opened up IE after all this and nothing was loading at all. Then I just tried www.msn.com and a text only version of thepage opened up. I assumed that it was just the homepage was having trouble so I put in another page, yahoo.com and that didn't load. So I went back to msn and that no longer loaded. I could be wrong, but I'm thinking that the internet connection is there, but the virus is messing up the way it's accessed and adding an extra www. and .net to each address (before, I had said it was an extra .com, but I realise now it was .net). I don't know if this will help at all.

Thanks

Neal · #6 (**permalink**) 19-06-2006, 04:32 AM

I'm afraid your computer is in serious trouble, if you can't get to internet to do much needed scans to get rid of bad things.

Try this to get your internet connection back and if this does not work you should seriously consider reformatting your computer.

Download to another computer and burn to disk and run on your computer, run the program and click on "finish"

Reboot to see if connection is back.

This:
LSPfix.zip or LSPfix.exe

Humanji · #7 (**permalink**) 20-06-2006, 08:03 PM

Unfortunately that did nothing. Ah well, thanks for trying. But I suppose on the plus side, it'll at least be a chance to clear up all the rubbish on their computer

Neal · #8 (**permalink**) 20-06-2006, 09:25 PM

Good luck to everybody.

Humanji · #9 (**permalink**) 21-06-2006, 10:43 PM

Hey, just thought I'd give an update. I was fiddling about with a few ideas and found some info on the net and managed to clear up the virus to an extent. I don't know if this will work for all dl.exe related viruses but it's worth a try.

I went onto the McAfee website and downloaded the latest SuperDat.exe (I had to register to get it).

Once downloaded, I went into Start Menu--->Run... In the prompt box I browsed to where I had downloaded SuperDat.exe and selected the file. Before running it, I added /e c:\SDAT and hit OK. This extracted the contents of the file to c:\SDAT.

I restarted the computer in SafeMode With Command Prompt. Then typed:

CD\SDAT

Scan /adl /clean /report report.txt /secure /program /streams /mime /mailbox /allole /rpterr /rptcor

This scanned through the hard disk and found that I was infected with the Win32.Gael.3666 I'd say just about every executable has been infected with it. When the scan finished, I restarted and the dl.exe box no longer appeared. Also, my internet connection was restored. I still couldn't install McAfee, but managed to install the AVG scanner that will do for the mean time. I ran a few scans with a few different programs (AVG, SpySweeper etc) and it found a few residual infected files.

I tried to run the two online scanners that you suggested, but for some reason I can't use them. The button on the web pages to start the scans just don't work. But it's late so I'm calling it a night. The point is that it's a possible work around for anyone else infected with the virus

Neal · #10 (**permalink**) 22-06-2006, 12:08 AM

Thanks for the info.

If you are no longer having any more trouble here is some preventative measures for you.

Here are some preventive measures you can take to keep your computer from getting infected again. also keep all these and Ad-awareSE and SpybotS&D updated.

Read This First - IMPORTANT Instructions

Flush your restore points in ME and XP, by turning System Restore off and then back on.
This will create a fresh restore point.

Explained Here:
Windows XP: http://vil.nai.com/vil/SystemHelpDoc...ysRestore.aspx

Explained Here
Microsoft ME:
http://service1.symantec.com/SUPPORT...rc=sec_doc_nam

RegProtect

This small registry protection tool will save you hours of heartache by notifying you when some program good or bad is trying to access your registry.

You have the option of allowing(good) items or blocking(bad)items.

http://www.diamondcs.com.au/index.php?page=regprot

To reduce the re-infection potential for malware and protect yourself against spyware, here are a few helpful suggestions:

1. Keep Windows and Internet Explorer current with the latest critical security updates from Microsoft. This will patch many of the security holes through which attackers can gain access to your computer. You CANNOT complete this update using an alternate browser.
http://v5.windowsupdate.microsoft.co....aspx?ln=en-us

http://www.microsoft.com/windows/ie/default.asp

2. Run your antivirus software regularly, and to keep its definitions up-to-date. If you are thinking about switching, there are a some good free Antivirus programs that are decent, including AVG and Avast!.
AVG: http://free.grisoft.com/doc/1

Avast: http://www.avast.com/eng/avast_4_home.html

3. In addtion to using Ad-aware consider using another free malware scanning/removal program:
Windows Defender

http://www.microsoft.com/athome/secu...e/default.mspx

4. Consider using a free firewall if you are not already using one. Some good free ones are:
Kerio
http://www.sunbelt-software.com/Kerio.cfm

OutPost Personal Firewall:
Outpost

5. Consider using an alternate free browser for general web surfing but you must use IE for windows update.
Mozilla Firefox: www.mozilla.org/products/firefox/

6. Consider increasing your browser security by using these programs:
SpywareGuard will protect your homepage from being hijacked: http://www.javacoolsoftware.com/spywareguard.html
SpywareBlaster will increase browser protection by blocking Thousands of known malware sites by adding them to IE's restricted sites zone. Download it here:

http://www.javacoolsoftware.com/spywareblaster.html

If you use SpywareBlaster, you can also use a customblocklist to add even more entries into IE restricted sites zone. Go to this site for the current list and how to use instructions: http://customblockinglist.cjb.net/

IE-SPYAD is similar in that it adds thousands more known malware sites to IE's restricted zone. Download it here:
https://netfiles.uiuc.edu/ehowes/www/resource.htm

Block access to Untrustworthy Sites

You can prevent your computer from visiting a myriad of untrustworthy sites and ad-servers by installing a customised hosts file. One of the best available is the: MVPS Hosts File. Simply follow the instructions to install the file in the correct location. This will not only make surfing safer but will improve website load times and block popups from many of the large ad-servers.

Mcafee SiteAdvisor

Surf the Net safer with SiteAdvisor, SiteAdvisor notifies you of safe sites or dangerous sites before you ever go there with a simple green check or a red x or a yellow caution when you do a Google search. Just put your cursor on the green check or red X or caution and recieve information about the site.

SiteAdvisor works with Internet Explorer and FireFox.

SiteAdvisor

See what it looks like Here

*Remember just like your primary anti-virus software, it is important to keep all of these programs up-to-date and use them on a regular basis. It's Free