New HJT LOG-i hope all you smart people out there figure out this problem
Logfile of HijackThis v1.99.1
Scan saved at 9:54:23 PM, on 10/24/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINNT\System32\svchost.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINNT\System32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\PavFnSvr.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\pavsrv50.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\AVENGINE.EXE
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\FIREWALL\PNMSRV.EXE
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\PsImSvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\TPSrv.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb03.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINNT\system32\ICO.EXE
C:\Program Files\FSI\F-Prot\F-StopW.EXE
C:\WINNT\system32\Pelmiced.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\APVXDWIN.EXE
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\WebProxy.exe
C:\WINNT\system32\wuauclt.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Documents and Settings\Cerniglia\Desktop\uninstaller\HijackThis.exe
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_0.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_0_0.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb03.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [F-StopW] C:\Program Files\FSI\F-Prot\F-StopW.EXE
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O4 - Global Startup: Wireless-G Notebook Adapter Utility.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter\Startup.exe
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll
O12 - Plugin for .au: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .mid: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .mp3: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .png: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin5.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for .wav: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for �)héŒac: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
O12 - Plugin for °º7Yü`c: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) -
http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) -
http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) -
http://us.dl1.yimg.com/download.yaho...st20040510.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) -
http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} (FujifilmUploader Class) -
http://www.samsphotoclub.com/upload/...loadClient.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -
http://zone.msn.com/binFramework/v10...o.cab34246.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) -
http://security.symantec.com/SSC/Sha.../bin/cabsa.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} -
http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) -
http://lg.home.microsoft.com/search/...chsettings.cab
O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAM FILES\AVPERSONAL\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: NICSer_WPC54G - Unknown owner - C:\Program Files\Linksys\Wireless-G Notebook Adapter\NICServ.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\pavsrv50.exe
O23 - Service: Panda Network Manager (PNMSRV) - Panda Software - C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\FIREWALL\PNMSRV.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\PsImSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software - C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\TPSrv.exe
Ad-Aware SE Build 1.06r1
Logfile Created on:Monday, October 24, 2005 9:19:23 PM
Created with Ad-Aware SE Personal, free for private use.
Using definitions file

E1R71 19.10.2005
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
MRU List(TAC index:0):46 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Definition File:
=========================
Definitions File Loaded:
Reference Number : SE1R71 19.10.2005
Internal build : 83
File location : C:\Program Files\Lavasoft\Ad-Aware SE Personal\defs.ref
File size : 536446 Bytes
Total size : 1605851 Bytes
Signature data size : 1572346 Bytes
Reference data size : 32993 Bytes
Signatures total : 44624
CSI Fingerprints total : 1056
CSI data size : 37714 Bytes
Target categories : 15
Target families : 763
Memory + processor status:
==========================
Number of processors : 1
Processor architecture : Intel Pentium III
Memory available:14 %
Total physical memory:261592 kb
Available physical memory:35608 kb
Total page file size:630252 kb
Available on page file:258384 kb
Total virtual memory:2097024 kb
Available virtual memory:2020148 kb
OS:Microsoft Windows 2000 Professional Service Pack 4 (Build 2195)
Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file
Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects
10-24-2005 9:19:23 PM - Scan started. (Full System Scan)
MRU List Object Recognized!
Location: : C:\Documents and Settings\Cerniglia\Application Data\microsoft\office\recent
Description : list of recently opened documents using microsoft office
MRU List Object Recognized!
Location: : C:\Documents and Settings\Cerniglia\recent
Description : list of recently opened documents
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\adobe\acrobat reader\5.0\avgeneral\crecentfiles
Description : list of recently used files in adobe reader
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\adobe\photoshop\7.0\visiteddirs
Description : adobe photoshop 7 recent work folders
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\ahead\cover designer\recent file list
Description : list of recently used files in ahead cover designer
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\ahead\nero - burning rom\recent file list
Description : list of recently used files in nero burning rom
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\ahead\nero wave editor\recent file list
Description : list of recently used files in nero wave editor
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\automap\8.0\findmru
Description : list of recently used find queries used in microsoft automap-based products
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\clipart gallery\2.0\mrudescription
Description : most recently used description in microsoft clipart gallery
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct3d
MRU List Object Recognized!
Location: : software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct3d
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct X
MRU List Object Recognized!
Location: : software\microsoft\direct3d\mostrecentapplication
Description : most recent application to use microsoft direct X
MRU List Object Recognized!
Location: : software\microsoft\directdraw\mostrecentapplication
Description : most recent application to use microsoft directdraw
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\directinput\mostrecentapplication
Description : most recent application to use microsoft directinput
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\directinput\mostrecentapplication
Description : most recent application to use microsoft directinput
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\internet explorer
Description : last download directory used in microsoft internet explorer
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\internet explorer\main
Description : last save directory used in microsoft internet explorer
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\internet explorer\typedurls
Description : list of recently entered addresses in microsoft internet explorer
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\mediaplayer\medialibraryui
Description : last selected node in the microsoft windows media player media library
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\mediaplayer\player\recentfilelist
Description : list of recently used files in microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\mediaplayer\player\settings
Description : last save as directory used in jasc paint shop pro
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\mediaplayer\player\settings
Description : last open directory used in jasc paint shop pro
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\mediaplayer\preferences
Description : last cd record path used in microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\mediaplayer\preferences
Description : last playlist index loaded in microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\mediaplayer\preferences
Description : last playlist loaded in microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\mediaplayer\preferences
Description : last search path used in microsoft windows media player
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\microsoft management console\recent file list
Description : list of recent snap-ins used in the microsoft management console
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\office\9.0\common\open find\microsoft powerpoint\settings\insert picture\file name mru
Description : list of recent pictured inserted in microsoft powerpoint
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\office\9.0\common\open find\microsoft powerpoint\settings\save as\file name mru
Description : list of recent documents saved by microsoft powerpoint
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\office\9.0\common\open find\microsoft word\settings\open\file name mru
Description : list of recent documents opened by microsoft word
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\office\9.0\common\open find\microsoft word\settings\save as\file name mru
Description : list of recent documents saved by microsoft word
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\office\9.0\excel\recent files
Description : list of recent files used by microsoft excel
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\office\9.0\powerpoint\recent file list
Description : list of recent files used by microsoft powerpoint
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\office\9.0\powerpoint\recent typeface list
Description : list of recently used typefaces in microsoft powerpoint
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\picture it! publishing\5.0\recent file list
Description : list of recently used files in microsoft picture it!
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\windows\currentversion\applets\regedit
Description : last key accessed using the microsoft registry editor
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
Description : list of recent programs opened
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
Description : list of recently saved files, stored according to file extension
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\windows\currentversion\explorer\recentdocs
Description : list of recent documents opened
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\windows\currentversion\explorer\runmru
Description : mru list for items opened in start | run
MRU List Object Recognized!
Location: : software\musicmatch\musicmatch jukebox\4.0\fileconv
Description : file conversion location settings in musicmatch jukebox
MRU List Object Recognized!
Location: : software\musicmatch\musicmatch jukebox\4.0\mmradio
Description : information on the last station listened to using musicmatch radio
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\nico mak computing\winzip\filemenu
Description : winzip recently used archives
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\smartftp\connection data
Description : list of recently accessed servers using smartftp
MRU List Object Recognized!
Location: : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\windows media\wmsdk\general
Description : windows media sdk
Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ProcessID : 204
ThreadCreationTime : 10-24-2005 11:26:02 PM
BasePriority : Normal
#:2 [csrss.exe]
FilePath : \??\C:\WINNT\system32\
ProcessID : 228
ThreadCreationTime : 10-24-2005 11:26:16 PM
BasePriority : Normal
#:3 [winlogon.exe]
FilePath : \??\C:\WINNT\system32\
ProcessID : 248
ThreadCreationTime : 10-24-2005 11:26:20 PM
BasePriority : High
#:4 [services.exe]
FilePath : C:\WINNT\system32\
ProcessID : 276
ThreadCreationTime : 10-24-2005 11:26:23 PM
BasePriority : Normal
FileVersion : 5.00.2195.7035
ProductVersion : 5.00.2195.7035
ProductName : Microsoft(R) Windows (R) 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
LegalCopyright : Copyright (C) Microsoft Corp. 1981-1999
OriginalFilename : services.exe
#:5 [lsass.exe]
FilePath : C:\WINNT\system32\
ProcessID : 288
ThreadCreationTime : 10-24-2005 11:26:23 PM
BasePriority : Normal
FileVersion : 5.00.2195.7011
ProductVersion : 5.00.2195.7011
ProductName : Microsoft(R) Windows (R) 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : LSA Executable and Server DLL (Export Version)
InternalName : lsasrv.dll and lsass.exe
LegalCopyright : Copyright (C) Microsoft Corp. 1981-1999
OriginalFilename : lsasrv.dll and lsass.exe
#:6 [svchost.exe]
FilePath : C:\WINNT\system32\
ProcessID : 484
ThreadCreationTime : 10-24-2005 11:26:30 PM
BasePriority : Normal
FileVersion : 5.00.2134.1
ProductVersion : 5.00.2134.1
ProductName : Microsoft(R) Windows (R) 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : Copyright (C) Microsoft Corp. 1981-1999
OriginalFilename : svchost.exe
#:7 [spoolsv.exe]
FilePath : C:\WINNT\system32\
ProcessID : 520
ThreadCreationTime : 10-24-2005 11:26:33 PM
BasePriority : Normal
FileVersion : 5.00.2195.7059
ProductVersion : 5.00.2195.7059
ProductName : Microsoft(R) Windows (R) 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolss.exe
LegalCopyright : Copyright (C) Microsoft Corp. 1981-1999
OriginalFilename : spoolss.exe
#:8 [avwupsrv.exe]
FilePath : C:\Program Files\AVPersonal\
ProcessID : 556
ThreadCreationTime : 10-24-2005 11:26:36 PM
BasePriority : Normal
#:9 [svchost.exe]
FilePath : C:\WINNT\System32\
ProcessID : 576
ThreadCreationTime : 10-24-2005 11:26:37 PM
BasePriority : Normal
FileVersion : 5.00.2134.1
ProductVersion : 5.00.2134.1
ProductName : Microsoft(R) Windows (R) 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : Copyright (C) Microsoft Corp. 1981-1999
OriginalFilename : svchost.exe
#:10 [ewidoctrl.exe]
FilePath : C:\Program Files\ewido\security suite\
ProcessID : 588
ThreadCreationTime : 10-24-2005 11:26:38 PM
BasePriority : Normal
FileVersion : 3, 0, 0, 1
ProductVersion : 3, 0, 0, 1
ProductName : ewido control
CompanyName : ewido networks
FileDescription : ewido control
InternalName : ewido control
LegalCopyright : Copyright © 2004
OriginalFilename : ewidoctrl.exe
#:11 [nvsvc32.exe]
FilePath : C:\WINNT\System32\
ProcessID : 768
ThreadCreationTime : 10-24-2005 11:26:52 PM
BasePriority : Normal
FileVersion : 6.14.10.4482
ProductVersion : 6.14.10.4482
ProductName : NVIDIA Driver Helper Service, Version 44.82
CompanyName : NVIDIA Corporation
FileDescription : NVIDIA Driver Helper Service, Version 44.82
InternalName : NVSVC
LegalCopyright : (C) NVIDIA Corporation. All rights reserved.
OriginalFilename : nvsvc32.exe
#:12 [pavfnsvr.exe]
FilePath : C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\
ProcessID : 796
ThreadCreationTime : 10-24-2005 11:26:53 PM
BasePriority : Normal
FileVersion : 5.09.06.00
ProductVersion : 5.09.06.00
ProductName : Panda Software PavFnSvr
CompanyName : Panda Software
FileDescription : Panda Function Service
InternalName : PavFnSvr
LegalCopyright : © Panda Software 2005
OriginalFilename : PavFnSvr.exe
#:13 [pavprsrv.exe]
FilePath : C:\Program Files\Common Files\Panda Software\PavShld\
ProcessID : 832
ThreadCreationTime : 10-24-2005 11:26:57 PM
BasePriority : Normal
FileVersion : 1.3.0.0
ProductVersion : 1.3.0.0
ProductName : PandaShield
CompanyName : Panda Software
FileDescription : Panda Process Protection Service
InternalName : PavPrSrv
LegalCopyright : Copyright © 2004, Panda Software
OriginalFilename : PavPrSrv.exe
#:14 [pavsrv50.exe]
FilePath : C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\
ProcessID : 844
ThreadCreationTime : 10-24-2005 11:26:57 PM
BasePriority : High
FileVersion : 2, 0, 1840, 12
ProductVersion : 2.0.1840.12
ProductName : Panda Antivirus for Windows NT/2000/XP/2003
CompanyName : Panda Software
FileDescription : On-Access Antivirus Scanner Service.
InternalName : pavsrv.exe
LegalCopyright : © Panda Software 2005.
OriginalFilename : pavsrv.exe
#:15 [avengine.exe]
FilePath : C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\
ProcessID : 852
ThreadCreationTime : 10-24-2005 11:26:58 PM
BasePriority : Normal
FileVersion : 2, 0, 1840, 15
ProductVersion : 2.0.1840.15
ProductName : Panda Antivirus for Windows NT/2000/XP/2003
CompanyName : Panda Software
FileDescription : Enhanced On-Access Antivirus Scanner Process.
InternalName : avengine.exe
LegalCopyright : © Panda Software 2005.
OriginalFilename : avengine.exe
#:16 [pnmsrv.exe]
FilePath : C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\FIREWALL\
ProcessID : 864
ThreadCreationTime : 10-24-2005 11:26:58 PM
BasePriority : Normal
FileVersion : 2, 0, 4, 41
ProductVersion : 2.0.0.0
ProductName : Panda Network Manager
CompanyName : Panda Software
FileDescription : Panda Network Manager Service
InternalName : PNMSRV.exe
LegalCopyright : Copyright © 2005 Panda Software
OriginalFilename : PNMSRV.exe
#:17 [psimsvc.exe]
FilePath : C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\
ProcessID : 904
ThreadCreationTime : 10-24-2005 11:26:59 PM
BasePriority : Normal
FileVersion : 2, 1, 12, 0
ProductVersion : 2, 1, 12, 0
ProductName : Panda Antivirus
CompanyName : Panda Software Internacional
FileDescription : PsImSvc
InternalName : PsImSvc
LegalCopyright : © Panda Software 2005.
OriginalFilename : PsImSvc.exe
#:18 [regsvc.exe]
FilePath : C:\WINNT\system32\
ProcessID : 924
ThreadCreationTime : 10-24-2005 11:27:01 PM
BasePriority : Normal
FileVersion : 5.00.2195.6701
ProductVersion : 5.00.2195.6701
ProductName : Microsoft(R) Windows (R) 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Remote Registry Service
InternalName : regsvc
LegalCopyright : Copyright (C) Microsoft Corp. 1981-1999
OriginalFilename : REGSVC.EXE
#:19 [mstask.exe]
FilePath : C:\WINNT\system32\
ProcessID : 948
ThreadCreationTime : 10-24-2005 11:27:02 PM
BasePriority : Normal
FileVersion : 4.71.2195.6972
ProductVersion : 4.71.2195.6972
ProductName : Microsoft® Windows® Task Scheduler
CompanyName : Microsoft Corporation
FileDescription : Task Scheduler Engine
InternalName : TaskScheduler
LegalCopyright : Copyright (C) Microsoft Corp. 1997
OriginalFilename : mstask.exe
#:20 [tpsrv.exe]
FilePath : C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\
ProcessID : 1008
ThreadCreationTime : 10-24-2005 11:27:05 PM
BasePriority : Normal
FileVersion : 6, 0, 0, 0
ProductVersion : 6, 0, 0, 0
ProductName : TPSrv Application
CompanyName : Panda Software
FileDescription : TPSrv Application
InternalName : TPSrv
LegalCopyright : © 2005 Panda Software. All rights reserved.
OriginalFilename : TPSrv.exe
#:21 [explorer.exe]
FilePath : C:\WINNT\
ProcessID : 1192
ThreadCreationTime : 10-24-2005 11:27:22 PM
BasePriority : Normal
FileVersion : 5.00.3700.6690
ProductVersion : 5.00.3700.6690
ProductName : Microsoft(R) Windows (R) 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
LegalCopyright : Copyright (C) Microsoft Corp. 1981-1999
OriginalFilename : EXPLORER.EXE
#:22 [svchost.exe]
FilePath : C:\WINNT\system32\
ProcessID : 1200
ThreadCreationTime : 10-24-2005 11:27:22 PM
BasePriority : Normal
FileVersion : 5.00.2134.1
ProductVersion : 5.00.2134.1
ProductName : Microsoft(R) Windows (R) 2000 Operating System
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
LegalCopyright : Copyright (C) Microsoft Corp. 1981-1999
OriginalFilename : svchost.exe
#:23 [hpztsb03.exe]
FilePath : C:\WINNT\System32\spool\drivers\w32x86\3\
ProcessID : 1480
ThreadCreationTime : 10-24-2005 11:27:50 PM
BasePriority : Normal
FileVersion : 2,38,0,0
ProductName : HP DeskJet
CompanyName : HP
LegalCopyright : Copyright (c) Hewlett-Packard Company 1999-2001
#:24 [point32.exe]
FilePath : C:\Program Files\Microsoft IntelliPoint\
ProcessID : 1512
ThreadCreationTime : 10-24-2005 11:27:51 PM
BasePriority : Normal
#:25 [viewmgr.exe]
FilePath : C:\Program Files\Viewpoint\Viewpoint Manager\
ProcessID : 1492
ThreadCreationTime : 10-24-2005 11:27:54 PM
BasePriority : Normal
FileVersion : 2, 0, 0, 42
ProductVersion : 2, 0, 0, 42
ProductName : Viewpoint Manager
CompanyName : Viewpoint Corporation
FileDescription : ViewMgr
InternalName : Viewpoint Manager
LegalCopyright : Copyright © 2004
OriginalFilename : ViewMgr.exe
Comments : Viewpoint Manager
#:26 [gcasserv.exe]
FilePath : C:\Program Files\Microsoft AntiSpyware\
ProcessID : 1448
ThreadCreationTime : 10-24-2005 11:27:55 PM
BasePriority : Idle
FileVersion : 1.00.0615
ProductVersion : 1.00.0615
ProductName : Microsoft AntiSpyware (Beta 1)
CompanyName : Microsoft Corporation
FileDescription : Microsoft AntiSpyware Service
InternalName : gcasServ
LegalCopyright : Copyright © 2004-2005 Microsoft Corporation. All rights reserved.
LegalTrademarks : Microsoft® and Windows® are registered trademarks of Microsoft Corporation. SpyNet(tm) is a trademark of Microsoft Corporation.
OriginalFilename : gcasServ.exe
#:27 [ico.exe]
FilePath : C:\WINNT\system32\
ProcessID : 1380
ThreadCreationTime : 10-24-2005 11:27:58 PM
BasePriority : Normal
FileVersion : 1, 0, 0, 8
ProductVersion : 1.0.0.0
ProductName : MouseSuite 98
CompanyName : Primax Electronics Ltd.
FileDescription : Mouse Suite 98 Daemon
InternalName : pelmiced.exe
LegalCopyright : Copyright (c) 1997, Primax Electronics Ltd.
LegalTrademarks : Primax Electronics Ltd.
#:28 [f-stopw.exe]
FilePath : C:\Program Files\FSI\F-Prot\
ProcessID : 1560
ThreadCreationTime : 10-24-2005 11:28:00 PM
BasePriority : Normal
FileVersion : 3.16C
ProductVersion : 3.16C
ProductName : F-StopW NT/2000/XP
CompanyName : Frisk Software International
FileDescription : F-StopW Version 3.16C
InternalName : F-StopW
LegalCopyright : Copyright © 2005 Frisk Software International
OriginalFilename : F-StopW.EXE
#:29 [pelmiced.exe]
FilePath : C:\WINNT\system32\
ProcessID : 1568
ThreadCreationTime : 10-24-2005 11:28:00 PM
BasePriority : Normal
FileVersion : 1, 0, 8, 5
ProductVersion : 1.0.0.0
ProductName : MouseSuite 98
CompanyName : Primax Electronics Ltd.
FileDescription : Mouse Suite 98 Daemon
InternalName : pelmiced.exe
LegalCopyright : Copyright (c) 1997, Primax Electronics Ltd.
LegalTrademarks : Primax Electronics Ltd.
#:30 [apvxdwin.exe]
FilePath : C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\
ProcessID : 1576
ThreadCreationTime : 10-24-2005 11:28:02 PM
BasePriority : Normal
FileVersion : 5.09.2
ProductVersion : 5.09.2
ProductName : Panda Antivirus Aplication
CompanyName : Panda Software International
FileDescription : ApVxdWin
InternalName : ApVxdWin.exe
LegalCopyright : © Panda Software 2005
OriginalFilename : ApVxdWin.exe
#:31 [wkcalrem.exe]
FilePath : C:\Program Files\Common Files\Microsoft Shared\Works Shared\
ProcessID : 1624
ThreadCreationTime : 10-24-2005 11:28:08 PM
BasePriority : Normal
FileVersion : 6.00.1828.1
ProductVersion : 6.00.1828.1
ProductName : Microsoft® Works 6.0
CompanyName : Microsoft® Corporation
FileDescription : Microsoft® Works Calendar Reminder Service
InternalName : WkCalRem
LegalCopyright : Copyright © Microsoft Corporation 1987-2000. All rights reserved.
OriginalFilename : WKCALREM.EXE
#:32 [gcasdtserv.exe]
FilePath : C:\Program Files\Microsoft AntiSpyware\
ProcessID : 1600
ThreadCreationTime : 10-24-2005 11:28:16 PM
BasePriority : Normal
FileVersion : 1.00.0615
ProductVersion : 1.00.0615
ProductName : Microsoft AntiSpyware (Beta 1)
CompanyName : Microsoft Corporation
FileDescription : Microsoft AntiSpyware Data Service
InternalName : gcasDtServ
LegalCopyright : Copyright © 2004-2005 Microsoft Corporation. All rights reserved.
LegalTrademarks : Microsoft® and Windows® are registered trademarks of Microsoft Corporation. SpyNet(tm) is a trademark of Microsoft Corporation.
OriginalFilename : gcasDtServ.exe
#:33 [wpc54cfg.exe]
FilePath : C:\Program Files\Linksys\Wireless-G Notebook Adapter\
ProcessID : 1656
ThreadCreationTime : 10-24-2005 11:28:19 PM
BasePriority : Normal
FileVersion : 2.0.2.21
ProductVersion : 1.3.0.1
ProductName : Linksys Instant WLAN Monitor
CompanyName : The Linksys Group, Inc.
FileDescription : Linksys Instant WLAN Monitor
InternalName : WLANMonitor.EXE
LegalCopyright : Copyright (C) 2003, Linksys
LegalTrademarks : Instant Wireless
OriginalFilename : WLANMonitor.EXE
Comments : Linksys Instant WLAN Monitor
#:34 [webproxy.exe]
FilePath : C:\Program Files\Panda Software\Panda Titanium 2006 Antivirus + Antispyware\
ProcessID : 1336
ThreadCreationTime : 10-24-2005 11:29:01 PM
BasePriority : Normal
FileVersion : 5, 9, 17, 26
ProductVersion : 5, 9, 1, 0
ProductName : Internet Resident
CompanyName : Panda Software
FileDescription : WebProxy
InternalName : WebProxy
LegalCopyright : © Panda Software 2004
OriginalFilename : WebProxy.exe
#:35 [wuauclt.exe]
FilePath : C:\WINNT\system32\
ProcessID : 636
ThreadCreationTime : 10-24-2005 11:29:10 PM
BasePriority : Normal
FileVersion : 5.8.0.2469 built by: lab01_n(wmbla)
ProductVersion : 5.8.0.2469
ProductName : Microsoft® Windows® Operating System
CompanyName : Microsoft Corporation
FileDescription : Automatic Updates
InternalName : wuauclt.exe
LegalCopyright : © Microsoft Corporation. All rights reserved.
OriginalFilename : wuauclt.exe
#:36 [ad-aware.exe]
FilePath : C:\Program Files\Lavasoft\Ad-Aware SE Personal\
ProcessID : 1012
ThreadCreationTime : 10-24-2005 11:44:28 PM
BasePriority : Normal
FileVersion : 6.2.0.236
ProductVersion : SE 106
ProductName : Lavasoft Ad-Aware SE
CompanyName : Lavasoft Sweden
FileDescription : Ad-Aware SE Core application
InternalName : Ad-Aware.exe
LegalCopyright : Copyright © Lavasoft AB Sweden
OriginalFilename : Ad-Aware.exe
Comments : All Rights Reserved
Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 46
Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 46
Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 46
Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 46
Disk Scan Result for C:\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 46
Scanning Hosts file......
Hosts file location:"C:\WINNT\system32\drivers\etc\hosts".
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Hosts file scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
1 entries scanned.
New critical objects:0
Objects found so far: 46
Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 46
9:41:28 PM Scan Complete
Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:22:05.365
Objects scanned:139373
Objects identified:0
Objects ignored:0
New critical objects:0
ArchiveData(auto-quarantine- 2005-10-24 21-17-29.bckp)
Referencefile : SE1R71 19.10.2005
======================================================
WIN32.P2P-WORM.ALCAN.A
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[0]=RegData : software\microsoft\ole "p2pnetwork"
obj[1]=RegData : software\microsoft\ole "p2pnetwork"
obj[2]=Folder : C:\Program Files\MsConfigs
obj[73]=File : C:\WINNT\SYSTEM32\bszip.dll
WIN32.TROJANDOWNLOADER.AGENT.DE
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[3]=Regkey : retro64_loader.r64loader
obj[4]=Regkey : retro64_loader.r64loader.1
MICROGAMING
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[5]=Regkey : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microgaming
COOLWEBSEARCH
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[6]=RegValue : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\internet explorer\main "HOMEOldSP"
obj[7]=Regkey : software\microsoft\internet explorer\urlsearchhooks
obj[9]=RegValue : software\microsoft\internet explorer\main "Use Custom Search URL"
obj[10]=RegValue : software\microsoft\internet explorer\search\searchproperties\en-us "Panel@Web"
obj[11]=RegValue : software\microsoft\internet explorer\main "Enable Browser Extensions"
obj[12]=RegValue : software\microsoft\internet explorer\main "Search Bar"
obj[13]=RegValue : software\microsoft\windows\currentversion\internet settings\user agent\post platform "iebar"
obj[74]=File : C:\WINNT\system32\wbem\logs\wbemess.log
ALEXA
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[14]=RegValue : .DEFAULT\software\microsoft\internet explorer\extensions\cmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
obj[15]=RegValue : S-1-5-21-1275210071-1682526488-1343024091-1000\software\microsoft\internet explorer\extensions\cmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
TRACKING COOKIE
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[16]=IECache Entry : Cookie:cerniglia@www.entrepreneur.com/
obj[17]=IECache Entry : Cookie:cerniglia@realmedia.com/
obj[18]=IECache Entry : Cookie:cerniglia@perf.overture.com/
obj[19]=IECache Entry : Cookie:cerniglia@tribalfusion.com/
obj[20]=IECache Entry : Cookie:cerniglia@bravenet.com/
obj[21]=IECache Entry : Cookie:cerniglia@doubleclick.net/
obj[22]=IECache Entry : Cookie:cerniglia@imrworldwide.com/cgi-bin
obj[23]=IECache Entry : Cookie:cerniglia@advertising.com/
obj[24]=IECache Entry : Cookie:cerniglia@hitbox.com/
obj[25]=IECache Entry : Cookie:cerniglia@pub17.bravenet.com/
obj[26]=IECache Entry : Cookie:cerniglia@maxserving.com/
obj[27]=IECache Entry : Cookie:cerniglia@xml.bravenetmedianetwork.com/
obj[28]=IECache Entry : Cookie:cerniglia@tripod.com/
obj[29]=IECache Entry : Cookie:cerniglia@targetnet.com/
obj[30]=IECache Entry : Cookie:cerniglia@ads.pointroll.com/
obj[31]=IECache Entry : Cookie:cerniglia@adrevolver.com/
obj[32]=IECache Entry : Cookie:cerniglia@rambler.ru/
obj[33]=IECache Entry : Cookie:cerniglia@mediaplex.com/
obj[34]=IECache Entry : Cookie:cerniglia@server.iad.liveperson.net/
obj[35]=IECache Entry : Cookie:cerniglia@statcounter.com/
obj[36]=IECache Entry : Cookie:cerniglia@trafficmp.com/
obj[37]=IECache Entry : Cookie:cerniglia@fortunecity.com/
obj[38]=IECache Entry : Cookie:cerniglia@serving-sys.com/
obj[39]=IECache Entry : Cookie:cerniglia@servedby.netshelter.net/
obj[40]=IECache Entry : Cookie:cerniglia@ads.addynamix.com/
obj[41]=IECache Entry : Cookie:cerniglia@zedo.com/
obj[42]=IECache Entry : Cookie:cerniglia@edge.ru4.com/
obj[43]=IECache Entry : Cookie:cerniglia@list.ru/
obj[44]=IECache Entry : Cookie:cerniglia@tradedoubler.com/
obj[45]=IECache Entry : Cookie:cerniglia@centrport.net/
obj[46]=IECache Entry : Cookie:cerniglia@media.adrevolver.com/adrevolver/
obj[47]=IECache Entry : Cookie:cerniglia@ehg-foxsports.hitbox.com/
obj[48]=IECache Entry : Cookie:cerniglia@landing.domainsponsor.com/
obj[49]=IECache Entry : Cookie:cerniglia@valueclick.com/
obj[50]=IECache Entry : Cookie:cerniglia@2o7.net/
obj[51]=IECache Entry : Cookie:cerniglia@apmebf.com/
obj[52]=IECache Entry : Cookie:cerniglia@atdmt.com/
obj[53]=IECache Entry : Cookie:cerniglia@z1.adserver.com/
obj[54]=IECache Entry : Cookie:cerniglia@ehg-lowermybills.hitbox.com/
obj[55]=IECache Entry : Cookie:cerniglia@servedby.advertising.com/
obj[56]=IECache Entry : Cookie:cerniglia@ehg-comcast.hitbox.com/
obj[57]=IECache Entry : Cookie:cerniglia@www.shopathomeselect.com/
obj[58]=IECache Entry : Cookie:cerniglia@hc2.humanclick.com/
obj[59]=IECache Entry : Cookie:cerniglia@stat.4u.pl/cgi-bin/
obj[60]=IECache Entry : Cookie:cerniglia@casalemedia.com/
obj[61]=IECache Entry : Cookie:cerniglia@statse.webtrendslive.com/
obj[62]=IECache Entry : Cookie:cerniglia@bfast.com/
obj[63]=IECache Entry : Cookie:cerniglia@fastclick.net/
obj[64]=IECache Entry : Cookie:cerniglia@bluestreak.com/
obj[65]=IECache Entry : Cookie:cerniglia@revenue.net/
obj[66]=IECache Entry : Cookie:cerniglia@ad2.pl.mediainter.net/please/
obj[67]=IECache Entry : Cookie:cerniglia@ads.adsag.com/
obj[68]=IECache Entry : Cookie:cerniglia@citi.bridgetrack.com/
obj[69]=IECache Entry : Cookie:cerniglia@questionmarket.com/
obj[70]=IECache Entry : Cookie:cerniglia@adtech.de/
obj[71]=IECache Entry : Cookie:cerniglia@ehg-airtran.hitbox.com/
obj[72]=IECache Entry : Cookie:cerniglia@qksrv.net/