Jump to content

Recommended Posts

Some of my problems:

 

pop-ups gallore of other anti-spyware software. when i go to there websites...their providers warn you of damaging software on their site. Also, AVG Free catches about 3 "Clone Virus's" in the temp folder every minute and there is a Random lettered folder in C:\ that is "unable to be touched" (can't delete or uninstall). Final problem that gets really annoying is any of my games will crash when i play online.

 

----------------------------------------

Logfile of HijackThis v1.99.1

Scan saved at 8:01:33 PM, on 24/10/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\iTunes\iTunes.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Documents and Settings\jagreen\My Documents\+Downloads\hijackthis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = scs.squidnet.iweb:8080

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll

O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab

O16 - DPF: {08EE4BCE-527E-4760-B11A-B829415E9103} (MaxisGolfTeleX Control) - http://simgolf.ea.com/teleport/simgolf/MaxisGolfTeleX.cab

O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1121370538663

O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab

O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab

O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O21 - SSODL: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\WINDOWS\system32\iprepair.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Edited by dumb_nelby2
Link to post
Share on other sites

Welcome to the forum, it looks to me like you have a hidden Vundo trojan infection because of no BHO's or 020 items showing in your HJT log.

 

Vundo usually directs you to rouge spyware programs like Winfixer. If you wish to find out, rename HijackThis.exe, call it dumb_nelby2.exe or whatever you wish. Restart the computer and post a new HJT log and let's see what shows up.

 

Thanks

Link to post
Share on other sites

heres what came up

 

---------------------------------------------

Logfile of HijackThis v1.99.1

Scan saved at 8:29:03 PM, on 26/10/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

C:\WINDOWS\system32\wuauclt.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\jagreen\My Documents\+Downloads\hijackthis\dumbnelby2.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = scs.squidnet.iweb:8080

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll

O2 - BHO: (no name) - {71002344-AED3-4A7B-AFB8-19663CC4D126} - C:\WINDOWS\Microsoft.NET\ruls.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll

O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll

O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab

O16 - DPF: {08EE4BCE-527E-4760-B11A-B829415E9103} (MaxisGolfTeleX Control) - http://simgolf.ea.com/teleport/simgolf/MaxisGolfTeleX.cab

O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1121370538663

O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab

O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab

O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: khfdb - C:\WINDOWS\system32\khfdb.dll (file missing)

O20 - Winlogon Notify: ruls - C:\WINDOWS\Microsoft.NET\ruls.dll

O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll

O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)

O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll

O21 - SSODL: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\WINDOWS\system32\iprepair.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Link to post
Share on other sites

OK, thanks for returning that information. That is a strange looking Vundo infection, let's see what happens when we run the fix. Atribune's fix will locate the bad stuff and it may take several tries to remove it all. You want to watch the Vundofix report until you see all files located have been deleted. Read your instructions so you understand them, then follow them carefully.

 

Thanks to Atribune and any others who helped with this fix.

 

Please download VundoFix.exe to your desktop

  • Double-click VundoFix.exe to run it.
  • Click the Scan for Vundo button.
  • Once it's done scanning, click the Remove Vundo button.
  • You will receive a prompt asking if you want to remove the files, click YES
  • Once you click yes, your desktop will go blank as it starts removing Vundo.
  • When completed, it will prompt that it will reboot your computer, click OK.
  • Please post the contents of C:\vundofix.txt and a new HiJackThis log in a reply to this thread.
Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting.

 

If there is a file VundoFix doesn't find we need it submitted. Please submit

the files to upload malware http://www.uploadmalware.com

 

Restart the computer and post C:\vundofix.txt and a new HiJackThis log

 

Thanks

Link to post
Share on other sites

VundoFix V6.2.6

 

Checking Java version...

 

Java version is 1.5.0.3

 

Java version is 1.5.0.6

 

Scan started at 3:46:46 PM 27/10/2006

 

Listing files found while scanning....

 

C:\WINDOWS\system32\aikpahpy.exe

C:\WINDOWS\system32\bsymcxys.exe

C:\WINDOWS\system32\chxhgflu.exe

C:\WINDOWS\system32\pcnhehqf.exe

C:\WINDOWS\Microsoft.NET\ruls.dll

C:\WINDOWS\Microsoft.NET\slur.ini

C:\WINDOWS\Microsoft.NET\slur.bak1

C:\WINDOWS\Microsoft.NET\slur.bak2

C:\WINDOWS\Microsoft.NET\slur.ini2

C:\WINDOWS\Microsoft.NET\slur.tmp

 

Beginning removal...

 

Attempting to delete C:\WINDOWS\system32\aikpahpy.exe

C:\WINDOWS\system32\aikpahpy.exe Has been deleted!

 

Attempting to delete C:\WINDOWS\system32\bsymcxys.exe

C:\WINDOWS\system32\bsymcxys.exe Has been deleted!

 

Attempting to delete C:\WINDOWS\system32\chxhgflu.exe

C:\WINDOWS\system32\chxhgflu.exe Has been deleted!

 

Attempting to delete C:\WINDOWS\system32\pcnhehqf.exe

C:\WINDOWS\system32\pcnhehqf.exe Has been deleted!

 

Attempting to delete C:\WINDOWS\Microsoft.NET\ruls.dll

C:\WINDOWS\Microsoft.NET\ruls.dll Could not be deleted.

 

Attempting to delete C:\WINDOWS\Microsoft.NET\slur.ini

C:\WINDOWS\Microsoft.NET\slur.ini Has been deleted!

 

Attempting to delete C:\WINDOWS\Microsoft.NET\slur.bak1

C:\WINDOWS\Microsoft.NET\slur.bak1 Has been deleted!

 

Attempting to delete C:\WINDOWS\Microsoft.NET\slur.bak2

C:\WINDOWS\Microsoft.NET\slur.bak2 Has been deleted!

 

Attempting to delete C:\WINDOWS\Microsoft.NET\slur.ini2

C:\WINDOWS\Microsoft.NET\slur.ini2 Has been deleted!

 

Attempting to delete C:\WINDOWS\Microsoft.NET\slur.tmp

C:\WINDOWS\Microsoft.NET\slur.tmp Has been deleted!

 

Performing Repairs to the registry.

Done!

 

Beginning removal...

 

Attempting to delete C:\WINDOWS\Microsoft.NET\ruls.dll

C:\WINDOWS\Microsoft.NET\ruls.dll Has been deleted!

 

Performing Repairs to the registry.

Done!

 

---------------------------------------------------------------------------------

Hijackthis Log

---------------------------------------------------------------------------------

 

Logfile of HijackThis v1.99.1

Scan saved at 4:05:00 PM, on 27/10/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\jagreen\My Documents\+Downloads\hijackthis\dumb-nelby2.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = scs.squidnet.iweb:8080

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {47E16ECD-2B91-45AE-901B-1818E1B5AA37} - C:\WINDOWS\Microsoft.NET\ruls.dll (file missing)

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll

O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll

O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab

O16 - DPF: {08EE4BCE-527E-4760-B11A-B829415E9103} (MaxisGolfTeleX Control) - http://simgolf.ea.com/teleport/simgolf/MaxisGolfTeleX.cab

O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1121370538663

O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab

O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab

O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: khfdb - C:\WINDOWS\system32\khfdb.dll (file missing)

O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll

O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)

O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll

O21 - SSODL: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\WINDOWS\system32\iprepair.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Link to post
Share on other sites

Good job running that tool :boxing: If it is ok with you I would like to run one more good spyware tool to make sure nothing is hiding. If that works for you, then do this.

 

1) Follow the directions in this link to download, install, update and run AVG Anti-Spyware 7.5.

http://www.virusvault.co.uk/fusionbb/showtopic.php?tid/33/

Thanks to John McKenna for the excellant tutorial.

 

2) Please download ATF Cleaner by Atribune

http://www.atribune.org/content/view/25/2/

Save it to your Desktop. We will use this later.

 

3) Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:

 

O2 - BHO: (no name) - {47E16ECD-2B91-45AE-901B-1818E1B5AA37} - C:\WINDOWS\Microsoft.NET\ruls.dll (file missing)

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab

(next one, if you are positive it is safe you can leave it)

O16 - DPF: {08EE4BCE-527E-4760-B11A-B829415E9103} (MaxisGolfTeleX Control) - http://simgolf.ea.com/teleport/simgolf/MaxisGolfTeleX.cab

 

Close all programs but HJT and all browser windows, then click on "Fix Checked"

 

(It is your computer but I suggest you either purchase the game and then carefully read the EULA when installing or play them online. Downloading free games from the internet is dangerous)

 

4) Run ATF Cleaner

Double-click ATF-Cleaner.exe to run the program.

Click Select All found at the bottom of the list.

Click the Empty Selected button.

Click Exit on the Main menu to close the program.

 

Restart the computer and post the results of the Spyware scan and a fresh HJT log. Let me know how the computer is running now.

 

Thanks

 

Your Java program is out of date and that may be why you got infected? Ser this information:

http://forums.spybot.info/showpost.php?p=1...amp;postcount=2

C:\Program Files\Java\jre1.5.0_06\ <<< out of date.

Link to post
Share on other sites

All seems to be fine now. Thanks so much for the help. One last thing: is there anything i could get rid of to speed my computer up?

 

Here's the logs:

 

Logfile of HijackThis v1.99.1

Scan saved at 6:50:48 PM, on 27/10/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe

C:\Documents and Settings\jagreen\My Documents\+Downloads\hijackthis\dumb_nelby2.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = scs.squidnet.iweb:8080

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll

O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll

O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll

O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1121370538663

O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab

O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab

O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: khfdb - C:\WINDOWS\system32\khfdb.dll (file missing)

O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll

O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)

O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll

O21 - SSODL: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\WINDOWS\system32\iprepair.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

 

---------------------------------------------------------

AVG Spyware log

---------------------------------------------------------

 

---------------------------------------------------------

AVG Anti-Spyware - Scan Report

---------------------------------------------------------

 

+ Created at: 6:16:33 PM 27/10/2006

 

+ Scan result:

 

 

 

C:\System Volume Information\_restore{D256A61A-8E82-45A7-BF9C-F69DF0A20220}\RP24\A0027003.dll -> Adware.Comet : Ignored.

HKU\S-1-5-21-1085031214-1677128483-854245398-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{052B12F7-86FA-4921-8482-26C42316B522} -> Adware.Generic : Ignored.

HKU\S-1-5-21-1085031214-1677128483-854245398-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A43385F0-7113-496D-96D7-B9B550E3FCCA} -> Adware.Isearch : Ignored.

HKU\S-1-5-21-1085031214-1677128483-854245398-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Adware.NewDotNet : Ignored.

C:\System Volume Information\_restore{D256A61A-8E82-45A7-BF9C-F69DF0A20220}\RP10\A0010912.dll -> Adware.Searchcolours : Ignored.

C:\System Volume Information\_restore{D256A61A-8E82-45A7-BF9C-F69DF0A20220}\RP5\A0007496.dll -> Adware.Searchcolours : Ignored.

C:\System Volume Information\_restore{D256A61A-8E82-45A7-BF9C-F69DF0A20220}\RP7\A0010731.dll -> Adware.Searchcolours : Ignored.

C:\Documents and Settings\jagreen\Local Settings\Temp\wdvvpisk.dll -> Logger.VBStat.e : Ignored.

C:\Documents and Settings\jagreen\Local Settings\Temp\wivvmdit.dll -> Logger.VBStat.e : Ignored.

C:\Documents and Settings\jagreen\Local Settings\Temp\yviasjjh.dll -> Logger.VBStat.e : Ignored.

C:\System Volume Information\_restore{D256A61A-8E82-45A7-BF9C-F69DF0A20220}\RP10\A0010907.dll -> Logger.VBStat.e : Ignored.

C:\System Volume Information\_restore{D256A61A-8E82-45A7-BF9C-F69DF0A20220}\RP10\A0010908.dll -> Logger.VBStat.e : Ignored.

C:\System Volume Information\_restore{D256A61A-8E82-45A7-BF9C-F69DF0A20220}\RP10\A0010909.dll -> Logger.VBStat.e : Ignored.

C:\System Volume Information\_restore{D256A61A-8E82-45A7-BF9C-F69DF0A20220}\RP10\A0010910.dll -> Logger.VBStat.e : Ignored.

C:\System Volume Information\_restore{D256A61A-8E82-45A7-BF9C-F69DF0A20220}\RP22\A0023999.dll -> Not-A-Virus.Downloader.Win32.SpyGame : Ignored.

C:\Program Files\EA GAMES\Back-Up\Dis5olu7i0n Sk1n5 v2\dis5olu7i0n.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Ignored.

C:\Program Files\EA GAMES\Back-Up\Force Models Patch 2.5\Install.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Ignored.

C:\Program Files\EA GAMES\Back-Up\Force Models Patch 2.5\Uninstall.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Ignored.

C:\Program Files\Skype\miltown[1]\DSMDemoCrack.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Ignored.

C:\System Volume Information\_restore{D256A61A-8E82-45A7-BF9C-F69DF0A20220}\RP18\A0021856.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Ignored.

:mozilla.176:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.2o7 : Ignored.

:mozilla.47:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.2o7 : Ignored.

:mozilla.48:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.2o7 : Ignored.

:mozilla.49:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.2o7 : Ignored.

:mozilla.50:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.2o7 : Ignored.

:mozilla.51:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.2o7 : Ignored.

:mozilla.6:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.2o7 : Ignored.

:mozilla.7:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.2o7 : Ignored.

:mozilla.8:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.2o7 : Ignored.

C:\Documents and Settings\bananas\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][2].txt -> TrackingCookie.2o7 : Ignored.

C:\Documents and Settings\ransomgreen\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Ignored.

:mozilla.31:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.

:mozilla.32:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.

:mozilla.33:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Adbrite : Ignored.

:mozilla.131:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.

:mozilla.137:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.

:mozilla.65:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.

:mozilla.67:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.

:mozilla.68:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.

:mozilla.69:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.

:mozilla.70:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.

:mozilla.73:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Adrevolver : Ignored.

:mozilla.23:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Advertising : Ignored.

:mozilla.24:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Advertising : Ignored.

:mozilla.25:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Advertising : Ignored.

:mozilla.26:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Advertising : Ignored.

:mozilla.27:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Advertising : Ignored.

:mozilla.89:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Advertising : Ignored.

:mozilla.90:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Advertising : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][1].txt -> TrackingCookie.Advertising : Ignored.

:mozilla.7:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Atdmt : Ignored.

:mozilla.85:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Atdmt : Ignored.

C:\Documents and Settings\bananas\Cookies\[email protected][2].txt -> TrackingCookie.Atdmt : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][2].txt -> TrackingCookie.Atdmt : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][2].txt -> TrackingCookie.Bfast : Ignored.

:mozilla.117:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Bridgetrack : Ignored.

:mozilla.118:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Bridgetrack : Ignored.

:mozilla.119:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Bridgetrack : Ignored.

:mozilla.120:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Bridgetrack : Ignored.

:mozilla.129:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Burstnet : Ignored.

C:\Documents and Settings\Guest\Cookies\[email protected][2].txt -> TrackingCookie.Burstnet : Ignored.

:mozilla.11:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.

:mozilla.12:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.

:mozilla.13:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.

:mozilla.14:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.

:mozilla.16:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.

:mozilla.20:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.

:mozilla.21:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored.

:mozilla.20:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.Com : Ignored.

:mozilla.21:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.Com : Ignored.

:mozilla.40:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Cpvfeed : Ignored.

:mozilla.41:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Cpvfeed : Ignored.

:mozilla.42:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Cpvfeed : Ignored.

:mozilla.43:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Cpvfeed : Ignored.

:mozilla.96:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Cpvfeed : Ignored.

:mozilla.97:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Cpvfeed : Ignored.

:mozilla.98:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Cpvfeed : Ignored.

:mozilla.99:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Cpvfeed : Ignored.

C:\Documents and Settings\bananas\Cookies\[email protected][2].txt -> TrackingCookie.Cpvfeed : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][2].txt -> TrackingCookie.Cpvfeed : Ignored.

C:\Documents and Settings\jagreen\Cookies\[email protected][2].txt -> TrackingCookie.Cpvfeed : Ignored.

:mozilla.44:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Doubleclick : Ignored.

C:\Documents and Settings\bananas\Cookies\[email protected][2].txt -> TrackingCookie.Doubleclick : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][2].txt -> TrackingCookie.Doubleclick : Ignored.

:mozilla.76:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Falkag : Ignored.

:mozilla.77:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Falkag : Ignored.

:mozilla.80:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Falkag : Ignored.

:mozilla.81:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Falkag : Ignored.

:mozilla.82:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Falkag : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][1].txt -> TrackingCookie.Falkag : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][1].txt -> TrackingCookie.Falkag : Ignored.

:mozilla.34:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.

:mozilla.35:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.

:mozilla.36:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.

:mozilla.37:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.

:mozilla.38:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.

:mozilla.39:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.

:mozilla.40:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.

:mozilla.41:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.

:mozilla.66:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.

:mozilla.71:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.

:mozilla.72:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Fastclick : Ignored.

C:\Documents and Settings\bananas\Cookies\[email protected][1].txt -> TrackingCookie.Fastclick : Ignored.

C:\Documents and Settings\bananas\Cookies\[email protected][1].txt -> TrackingCookie.Fastclick : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][2].txt -> TrackingCookie.Goclick : Ignored.

:mozilla.139:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.

:mozilla.140:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.

:mozilla.141:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.

:mozilla.142:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Hitbox : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][2].txt -> TrackingCookie.Hitbox : Ignored.

C:\Documents and Settings\ggreen\Cookies\ggree[email protected][2].txt -> TrackingCookie.Hitbox : Ignored.

C:\Documents and Settings\Guest\Cookies\[email protected][2].txt -> TrackingCookie.Kmpads : Ignored.

:mozilla.64:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.Liveperson : Ignored.

:mozilla.65:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.Liveperson : Ignored.

:mozilla.66:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.Liveperson : Ignored.

:mozilla.67:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.Liveperson : Ignored.

:mozilla.68:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.Liveperson : Ignored.

:mozilla.15:C:\Documents and Settings\ggreen\Application Data\Mozilla\Firefox\Profiles\k22qksos.default\cookies.txt -> TrackingCookie.Mediaplex : Ignored.

:mozilla.53:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Mediaplex : Ignored.

:mozilla.71:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Mediaplex : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][1].txt -> TrackingCookie.Mediaplex : Ignored.

:mozilla.18:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Overture : Ignored.

:mozilla.22:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Overture : Ignored.

:mozilla.10:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.Pointroll : Ignored.

:mozilla.11:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.Pointroll : Ignored.

:mozilla.12:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.Pointroll : Ignored.

:mozilla.13:C:\Documents and Settings\ransomgreen\Application Data\Mozilla\Firefox\Profiles\uunj90xt.default\cookies.txt -> TrackingCookie.Pointroll : Ignored.

:mozilla.11:C:\Documents and Settings\ggreen\Application Data\Mozilla\Firefox\Profiles\k22qksos.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.12:C:\Documents and Settings\ggreen\Application Data\Mozilla\Firefox\Profiles\k22qksos.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.13:C:\Documents and Settings\ggreen\Application Data\Mozilla\Firefox\Profiles\k22qksos.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.14:C:\Documents and Settings\ggreen\Application Data\Mozilla\Firefox\Profiles\k22qksos.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.52:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.57:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.58:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.59:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.60:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.61:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.62:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.63:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.64:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.65:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.66:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.67:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.68:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.69:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.74:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.77:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.78:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.79:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.80:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

:mozilla.8:C:\Documents and Settings\ggreen\Application Data\Mozilla\Firefox\Profiles\k22qksos.default\cookies.txt -> TrackingCookie.Reliablestats : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][1].txt -> TrackingCookie.Reliablestats : Ignored.

C:\Documents and Settings\ransomgreen\Cookies\[email protected][2].txt -> TrackingCookie.Reliablestats : Ignored.

C:\Documents and Settings\Guest\Cookies\[email protected][2].txt -> TrackingCookie.Specificclick : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][1].txt -> TrackingCookie.Statcounter : Ignored.

:mozilla.132:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.

:mozilla.17:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.

:mozilla.19:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.

:mozilla.20:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.

:mozilla.21:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.

:mozilla.22:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.

:mozilla.23:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.

:mozilla.24:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][1].txt -> TrackingCookie.Trafficmp : Ignored.

:mozilla.134:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored.

:mozilla.13:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored.

:mozilla.14:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored.

:mozilla.135:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Valueclick : Ignored.

:mozilla.136:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Valueclick : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][2].txt -> TrackingCookie.Web-stat : Ignored.

:mozilla.45:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Webtrendslive : Ignored.

:mozilla.15:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.

:mozilla.17:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.

:mozilla.18:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.

:mozilla.19:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.

:mozilla.60:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.

:mozilla.61:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.

:mozilla.62:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored.

C:\Documents and Settings\ggreen\Cookies\[email protected][2].txt -> TrackingCookie.Yieldmanager : Ignored.

:mozilla.133:C:\Documents and Settings\bananas\Application Data\Mozilla\Firefox\Profiles\wxi9ydqn.default\cookies.txt -> TrackingCookie.Zedo : Ignored.

C:\System Volume Information\_restore{D256A61A-8E82-45A7-BF9C-F69DF0A20220}\RP24\A0027031.dll -> Trojan.Crypt.t : Ignored.

 

 

::Report end

Link to post
Share on other sites

For some reason you chose to ignore what the AVG Spyware located??? This did nothing for you. Please run that scan again, choose to delete or at least quarantine what is located. Ignore something only if you know it is not bad. Post the new results and a HJT log run after the scan has been run. I will have suggestions at that time that may help speed up your computer.

 

Thanks

Link to post
Share on other sites

this is what happend:

 

the default "how to act" was ignore so i saved the log before i had done anything. after i saved the log i then selected quarentine and then i deleted all the problems. I know this because when i ran the scan again nothing showed up.

 

this would still make the HJT log correct...but i can still do another if you wish.

Edited by dumb_nelby2
Link to post
Share on other sites

Post the new results and a HJT log run after the scan has been run. I will have suggestions at that time that may help speed up your computer.

Yes, as stated in the instructions, I need to see a new AVG scan result and a new HJT log that is made after AVG removed what it located.

 

Could I have the exact error messages you are receiving from your game and from Firefox. You may have to download both of them again? Firefox is releasing a new version as we speak: http://www.mozilla.com/en-US/firefox/ <<< please DO NOT download the new version until out work is complete.

 

Thanks

Link to post
Share on other sites

this is what the error says (im not totally sure if the "mod name" is nvglzt but its nv*****.dll for sure)

 

Posted Image

 

here's what you requested

---------------------------------------------------------

AVG Anti-Spyware - Scan Report

---------------------------------------------------------

 

+ Created at: 4:03:08 PM 28/10/2006

 

+ Scan result:

 

 

 

:mozilla.7:C:\Documents and Settings\jagreen\Application Data\Mozilla\Firefox\Profiles\1tnu10aa.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.

 

 

::Report end

 

---------------------------------------------------------

HJT LOG

---------------------------------------------------------

Logfile of HijackThis v1.99.1

Scan saved at 4:03:52 PM, on 28/10/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\wscntfy.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe

C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Messenger\msmsgs.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

C:\Documents and Settings\jagreen\My Documents\+Downloads\hijackthis\dumbnelby2.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = scs.squidnet.iweb:8080

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll

O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll

O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" /STARTUP

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\npjpi150_09.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll

O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1121370538663

O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab

O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab

O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O20 - Winlogon Notify: khfdb - C:\WINDOWS\system32\khfdb.dll (file missing)

O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll

O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)

O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll

O21 - SSODL: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\WINDOWS\system32\iprepair.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Edited by dumb_nelby2
Link to post
Share on other sites

http://www.google.com/search?sourceid=navc...spearhead%2eexe

http://www.google.com/search?sourceid=navc...tm%29+Spearhead

http://www.gpdownloads.co.nz/dl.dyn/Files/3146.html <<< look to the left at this site, there are forums, you appear to have a corruption with one or more of the games files. Others seem to have the same problem. I just do not do this kind of troubleshooting. I would suggest you contact the maker of the game, or if you downloaded it online, download it again.

 

Here is some information about the other file which is not a Windows file either: http://www.google.com/search?sourceid=navc...q=nvoglnt%2edll

 

Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:

 

O20 - Winlogon Notify: khfdb - C:\WINDOWS\system32\khfdb.dll (file missing)

 

Close all programs but HJT and all browser windows, then click on "Fix Checked"

 

AVG Anti-Spyware is a good program but it does use some resources. Once the trial is over you can update and use the scanner for as long as you wish, but unless you purchase it you should turn it off completely so it does not run unless you start it manually.

 

System Restore does not know the good files from the bad. In case bad stuff has gotten into your System Restore files, follow the instructions in this link to get clean System Restore files. Turn it off, reboot then turn it back on:

http://service1.symantec.com/SUPPORT/tsgen...src=sec_doc_nam

 

Here is some great information from Tony Klein, Texruss, ChrisRLG and Grinler to help you stay clean and safe online:

http://forums.spybot.info/showthread.php?t=279

http://russelltexas.com/malware/allclear.htm

http://forum.malwareremoval.com/viewtopic.php?t=14

http://www.bleepingcomputer.com/forums/topict2520.html

http://cybercoyote.org/security/not-admin.shtml

 

Thanks...pskelley

Trusted HJT Advisor

PCPitStop forum

http://pcpitstop.com/about/supportus.asp

If you are reading this information...thank a teacher,

If you are reading it in English...thank a soldier.

Link to post
Share on other sites

http://www.google.com/search?hl=en&q=m...G=Google+Search

 

Try uninstalling the game that is causing this, these error messages will probably stop.

 

Thanks

 

Resolved the malware issues, this member will have to follow the links I provided and troubleshoot problems with the game at the website of where they downloaded it or one of the forums concerned with issues with the game.

Edited by pskelley
Link to post
Share on other sites
Guest
This topic is now closed to further replies.
×
×
  • Create New...